Being new to tor, I had opened a "onion circuits" window just to see some of it's magic without fully understanding what it means.
I noticed that in the "normal case" I see a variety of hosts from different domains, also changing frequently.
However on one day, all the nodes I saw (over a long time) just came from one domain only, and the list looked quite static. So I wondered whether tor would be as safe as usual or whether someone managed to infiltrate the tor network. Maybe it was just mis-configuration of some tor nodes, I don't know.
So can someone explain the magic about onion circuits and how things should look like if everything looks "normal"?
Examples for "all onion circuits from one source" (as I see it):
So what I see is that all Onion Circuits seems to be provided by
(At another time it was a different name, while still at another time it was many different names)