An attacker wishing to impersonate an current onionsite by developing a bogus Variation of it would use vanity addresses as an additional technique to persuade buyers that their address is the right. At the moment it's working with couple (relying the amount of cores it detects) personnel on CPU, but https://tronaddress.io