manifest_version: 1
generated_at: '2026-10-11T03:30:25+00:00'
scope: Publicly documented onion services operated by identifiable legal organisations.
excluded:
- marketplaces
- forums
- unattributable services (no identifiable organisation puts its name to the address)
- any service dealing with illegal goods or content
admission:
  public: Anyone can read the service. Provenance and liveness are both verified.
  gated: An account, invitation or credential is required to read the service. The address and its liveness
    are verified; the content behind the gate is NOT, and every gated entry carries a visible label saying
    so.
criteria_revision:
  date: '2026-10-11'
  change: The operator's own five onion services were retired and removed from the directory; the operator
    now lists no self-operated services.
  reason: The services stopped answering after the operator's onion hosting was withdrawn in October 2026.
    A directory whose whole product is liveness evidence cannot keep its own dead addresses in the list
    — least of all while telling readers that the operator's entries obey the same rules as everyone else's.
  safeguards:
  - The removals were triggered by the same liveness measurement every other entry is subject to, not
    by discretion.
  - The retired addresses, their dates and the reason are recorded in raw/operator_publication.json so
    the removal is auditable rather than invisible.
  - 'No entry was added, re-labelled or reordered to compensate: the directory shrank by five.'
  - Unattributable services remain excluded outright — that rule does the real work and is unchanged.
verification:
  tier1: onion-location-header / own-verifier-site (Tor Project header rules)
  tier2: own-domain-publication — must be liveness-gated; docs pages rot
  tier3: third-party listings are NOT accepted
  liveness: probed serially through a local Tor SOCKS proxy with retries; parallel probing produces false
    negatives against the circuit builder
entry_count: 46
operator:
  name: Schoedel Design
  url: https://yardland.net/
  disclosure: Schoedel Design operates Yardland. Its own services are admitted or excluded by the same
    published criteria applied to every other entry, receive no preferential placement, and are listed
    here so that the claim can be checked rather than taken on trust.
  self_application: 'Schoedel Design currently lists none of its own onion services, because it no longer
    operates any: all five were taken down in October 2026. They were removed from the directory on the
    same terms they were admitted on — they stopped answering, so they left, which is what happens to
    every other entry that stops answering. The retirement record is kept in raw/operator_publication.json
    so that ''no exemption for the operator'' remains a checkable statement rather than a claim.'
entries:
- name: Archive.org
  category: archive
  access: public
  homepage: https://archive.org/
  onion: archivep75mbjunhxc6x4j5mwjmomyxb573v42baldlqu56ruil2oiad.onion
  onion_url: https://archivep75mbjunhxc6x4j5mwjmomyxb573v42baldlqu56ruil2oiad.onion/
  provenance:
    tier: 1
    type: onion-location-header
    source: https://archive.org/
    verified_at: '2026-10-11T03:30:25+00:00'
  liveness:
    verdict: LIVE
    http: '200'
    attempts: 1
    passes: 1
    evidence: HTTP 200 over Tor, 1 successful attempt(s)
    checked_at: '2026-10-11T02:35:25+00:00'
  notes: null
  description: 'The Internet Archive''s own onion: the Wayback Machine plus its text, audio and software
    collections, reachable without a clearnet lookup.'
- name: Cwtch
  category: comms
  access: public
  homepage: https://cwtch.im/
  onion: cwtchim3z2gdsyb27acfc26lup5aqbegjrjsqulzrnkuoalq5h4gmcid.onion
  onion_url: http://cwtchim3z2gdsyb27acfc26lup5aqbegjrjsqulzrnkuoalq5h4gmcid.onion/
  provenance:
    tier: 1
    type: onion-location-header
    source: https://cwtch.im/
    verified_at: '2026-10-11T03:30:25+00:00'
  liveness:
    verdict: LIVE
    http: '200'
    attempts: 2
    passes: 1
    evidence: HTTP 200 over Tor, 1 successful attempt(s)
    checked_at: '2026-10-11T02:36:55+00:00'
  notes: null
  description: Metadata-resistant messaging from the Open Privacy Research Society — no phone number and
    no central server holding the conversation.
- name: Disroot
  category: comms
  access: public
  homepage: https://disroot.org/
  onion: j4dhkkxfcsvzvh3p5djkmuehhgd6t6l7wmzih6b4ss744hegwkiae7ad.onion
  onion_url: http://j4dhkkxfcsvzvh3p5djkmuehhgd6t6l7wmzih6b4ss744hegwkiae7ad.onion/
  provenance:
    tier: 1
    type: onion-location-header
    source: https://disroot.org/
    verified_at: '2026-10-11T03:30:25+00:00'
  liveness:
    verdict: LIVE
    http: '200'
    attempts: 1
    passes: 1
    evidence: HTTP 200 over Tor, 1 successful attempt(s)
    checked_at: '2026-10-11T02:37:01+00:00'
  notes: null
  description: Volunteer-run collective offering email, cloud storage, XMPP and search on free software,
    funded by donations.
- name: Keybase
  category: comms
  access: public
  homepage: https://keybase.io/
  onion: keybase5wmilwokqirssclfnsqrjdsi7jdir5wy7y7iu3tanwmtp6oid.onion
  onion_url: http://keybase5wmilwokqirssclfnsqrjdsi7jdir5wy7y7iu3tanwmtp6oid.onion/
  provenance:
    tier: 2
    type: own-domain-publication
    source: https://book.keybase.io/docs/cli
    verified_at: '2026-10-11T03:30:25+00:00'
  liveness:
    verdict: UNREACHABLE
    http: ''
    attempts: 1
    passes: 1
    evidence: Tor SOCKS5 reply 4 (host unreachable), reproduced 1x across 1 attempts — service descriptor
      not retrievable
    checked_at: '2026-10-11T02:37:04+00:00'
  notes: Address published on the org's own domain but NOT advertised via Onion-Location. Docs pages are
    not updated when a service is retired, so tier-2 addresses must be liveness-gated before publication.
  description: Encrypted chat, file sharing and public identity proofs, now owned by Zoom.
- name: Proton
  category: comms
  access: public
  homepage: https://proton.me/
  onion: protonmailrmez3lotccipshtkleegetolb73fuirgj7r4o4vfu7ozyd.onion
  onion_url: https://protonmailrmez3lotccipshtkleegetolb73fuirgj7r4o4vfu7ozyd.onion/
  provenance:
    tier: 1
    type: onion-location-header
    source: https://proton.me/
    verified_at: '2026-10-11T03:30:25+00:00'
  liveness:
    verdict: LIVE
    http: '200'
    attempts: 1
    passes: 1
    evidence: HTTP 200 over Tor, 1 successful attempt(s)
    checked_at: '2026-10-11T02:37:24+00:00'
  notes: null
  description: Encrypted email, calendar, drive and VPN from Proton AG, reached here without touching
    the clearnet.
- name: Riseup
  category: comms
  access: public
  homepage: https://riseup.net/
  onion: vww6ybal4bd7szmgncyruucpgfkqahzddi37ktceo3ah7ngmcopnpyyd.onion
  onion_url: http://vww6ybal4bd7szmgncyruucpgfkqahzddi37ktceo3ah7ngmcopnpyyd.onion/index.en.html
  provenance:
    tier: 1
    type: onion-location-header
    source: https://riseup.net/
    verified_at: '2026-10-11T03:30:25+00:00'
  liveness:
    verdict: LIVE
    http: '200'
    attempts: 1
    passes: 1
    evidence: HTTP 200 over Tor, 1 successful attempt(s)
    checked_at: '2026-10-11T02:37:26+00:00'
  notes: null
  description: Activist-run email, mailing lists and VPN collectives; accounts are not tied to a phone
    number or a third party.
- name: Systemli
  category: comms
  access: public
  homepage: https://www.systemli.org/
  onion: 7sk2kov2xwx6cbc32phynrifegg6pklmzs7luwcggtzrnlsolxxuyfyd.onion
  onion_url: http://7sk2kov2xwx6cbc32phynrifegg6pklmzs7luwcggtzrnlsolxxuyfyd.onion/
  provenance:
    tier: 1
    type: onion-location-header
    source: https://www.systemli.org/
    verified_at: '2026-10-11T03:30:25+00:00'
  liveness:
    verdict: LIVE
    http: '200'
    attempts: 1
    passes: 1
    evidence: HTTP 200 over Tor, 1 successful attempt(s)
    checked_at: '2026-10-11T02:37:29+00:00'
  notes: null
  description: German tech collective providing mail, pads and hosting to activists and civil-society
    groups.
- name: Monero
  category: financial
  access: public
  homepage: https://www.getmonero.org/
  onion: monerotoruzizulg5ttgat2emf4d6fbmiea25detrmmy7erypseyteyd.onion
  onion_url: http://monerotoruzizulg5ttgat2emf4d6fbmiea25detrmmy7erypseyteyd.onion/index.html
  provenance:
    tier: 1
    type: onion-location-header
    source: https://www.getmonero.org/
    verified_at: '2026-10-11T03:30:25+00:00'
  liveness:
    verdict: LIVE
    http: '200'
    attempts: 1
    passes: 1
    evidence: HTTP 200 over Tor, 1 successful attempt(s)
    checked_at: '2026-10-11T02:38:14+00:00'
  notes: null
  description: 'The Monero privacy-focused cryptocurrency project: wallets, documentation and downloads.'
- name: Bellingcat
  category: journalism
  access: public
  homepage: https://www.bellingcat.com/
  onion: bellcatmbguthn3age23lrbseln2lryzv3mt7whis7ktjw4qrestbzad.onion
  onion_url: http://bellcatmbguthn3age23lrbseln2lryzv3mt7whis7ktjw4qrestbzad.onion/
  provenance:
    tier: 1
    type: onion-location-header
    source: https://www.bellingcat.com/
    verified_at: '2026-10-11T03:30:25+00:00'
  liveness:
    verdict: UNREACHABLE
    http: ''
    attempts: 1
    passes: 1
    evidence: Tor SOCKS5 reply 4 (host unreachable), reproduced 1x across 1 attempts — service descriptor
      not retrievable
    checked_at: '2026-10-11T02:38:19+00:00'
  notes: 'ADVERTISED-BUT-UNREACHABLE: the organisation still serves this address, but Tor cannot reach
    the service. Report upstream.'
  description: Open-source investigations outlet that identifies people, weapons and events from public
    data.
- name: Deutsche Welle
  category: journalism
  access: public
  homepage: https://www.dw.com/
  onion: www.dwnewsgngmhlplxy6o2twtfgjnrnjxbegbwqx6wnotdhkzt562tszfid.onion
  onion_url: http://www.dwnewsgngmhlplxy6o2twtfgjnrnjxbegbwqx6wnotdhkzt562tszfid.onion/
  provenance:
    tier: 1
    type: onion-location-header
    source: https://www.dw.com/
    verified_at: '2026-10-11T03:30:25+00:00'
  liveness:
    verdict: LIVE
    http: '200'
    attempts: 1
    passes: 1
    evidence: HTTP 200 over Tor, 1 successful attempt(s)
    checked_at: '2026-10-11T02:38:24+00:00'
  notes: Advertised with a 'www.' hostname prefix; confirmed to resolve correctly over Tor (strict 56-char
    validators false-positive here).
  description: Germany's public international broadcaster; publisher-run onion edition of its news site.
- name: ProPublica
  category: journalism
  access: public
  homepage: https://www.propublica.org/
  onion: p53lf57qovyuvwsc6xnrppyply3vtqm7l6pcobkmyqsiofyeznfu5uqd.onion
  onion_url: http://p53lf57qovyuvwsc6xnrppyply3vtqm7l6pcobkmyqsiofyeznfu5uqd.onion/
  provenance:
    tier: 2
    type: own-domain-publication
    source: https://www.propublica.org/nerds/a-more-secure-and-anonymous-propublica-using-tor-hidden-services
    verified_at: '2026-10-11T03:30:25+00:00'
  liveness:
    verdict: TIMEOUT
    http: ''
    attempts: 2
    passes: 1
    evidence: last verdict TIMEOUT across 2 attempt(s)
    checked_at: '2026-10-11T02:39:54+00:00'
  notes: Address published on the org's own domain but NOT advertised via Onion-Location.
  description: US non-profit investigative newsroom; this address is the news site itself.
- name: RFE/RL
  category: journalism
  access: public
  homepage: https://www.rferl.org/
  onion: www.rferlo2zxgv23tct66v45s5mecftol5vod3hf4rqbipfp46fqu2q56ad.onion
  onion_url: https://www.rferlo2zxgv23tct66v45s5mecftol5vod3hf4rqbipfp46fqu2q56ad.onion/
  provenance:
    tier: 1
    type: onion-location-header
    source: https://www.rferl.org/
    verified_at: '2026-10-11T03:30:25+00:00'
  liveness:
    verdict: LIVE
    http: '200'
    attempts: 1
    passes: 1
    evidence: HTTP 200 over Tor, 1 successful attempt(s)
    checked_at: '2026-10-11T02:39:58+00:00'
  notes: Advertised with a 'www.' hostname prefix; confirmed to resolve correctly over Tor (strict 56-char
    validators false-positive here).
  description: Radio Free Europe/Radio Liberty, the US-funded broadcaster aimed at countries with restricted
    media.
- name: The Guardian
  category: journalism
  access: public
  homepage: https://www.theguardian.com/
  onion: www.guardian2zotagl6tmjucg3lrhxdk4dw3lhbqnkvvkywawy3oqfoprid.onion
  onion_url: https://www.guardian2zotagl6tmjucg3lrhxdk4dw3lhbqnkvvkywawy3oqfoprid.onion/us
  provenance:
    tier: 1
    type: onion-location-header
    source: https://www.theguardian.com/us
    verified_at: '2026-10-11T03:30:25+00:00'
  liveness:
    verdict: LIVE
    http: '200'
    attempts: 1
    passes: 1
    evidence: HTTP 200 over Tor, 1 successful attempt(s)
    checked_at: '2026-10-11T02:40:42+00:00'
  notes: Advertised with a 'www.' hostname prefix; confirmed to resolve correctly over Tor (strict 56-char
    validators false-positive here).
  description: British daily newspaper; publisher-run onion edition of the news site.
- name: Voice of America
  category: journalism
  access: public
  homepage: https://www.voanews.com/
  onion: www.voanews5aitmne6gs2btokcacixclgfl43cv27sirgbauyyjylwpdtqd.onion
  onion_url: https://www.voanews5aitmne6gs2btokcacixclgfl43cv27sirgbauyyjylwpdtqd.onion/
  provenance:
    tier: 1
    type: onion-location-header
    source: https://www.voanews.com/
    verified_at: '2026-10-11T03:30:25+00:00'
  liveness:
    verdict: LIVE
    http: '200'
    attempts: 1
    passes: 1
    evidence: HTTP 200 over Tor, 1 successful attempt(s)
    checked_at: '2026-10-11T02:40:52+00:00'
  notes: Advertised with a 'www.' hostname prefix; confirmed to resolve correctly over Tor (strict 56-char
    validators false-positive here).
  description: US government-funded international broadcaster; onion edition of its news site.
- name: taz
  category: journalism
  access: public
  homepage: https://taz.de/
  onion: zervmwoc5flabhlh3heegnspbpoebbgr3kgkaarkpnz2gtsuunlxgqyd.onion
  onion_url: http://zervmwoc5flabhlh3heegnspbpoebbgr3kgkaarkpnz2gtsuunlxgqyd.onion/!p4608;web/
  provenance:
    tier: 1
    type: onion-location-header
    source: https://taz.de/
    verified_at: '2026-10-11T03:30:25+00:00'
  liveness:
    verdict: LIVE
    http: '200'
    attempts: 1
    passes: 1
    evidence: HTTP 200 over Tor, 1 successful attempt(s)
    checked_at: '2026-10-11T02:41:04+00:00'
  notes: null
  description: die tageszeitung, the Berlin-based reader-owned daily newspaper; onion edition.
- name: Freedom of the Press Foundation
  category: press-freedom
  access: public
  homepage: https://freedom.press/
  onion: fpfjxcrmw437h6z2xl3w4czl55kvkmxpapg37bbopsafdu7q454byxid.onion
  onion_url: http://fpfjxcrmw437h6z2xl3w4czl55kvkmxpapg37bbopsafdu7q454byxid.onion/
  provenance:
    tier: 1
    type: onion-location-header
    source: https://freedom.press/
    verified_at: '2026-10-11T03:30:25+00:00'
  liveness:
    verdict: LIVE
    http: '200'
    attempts: 1
    passes: 1
    evidence: HTTP 200 over Tor, 1 successful attempt(s)
    checked_at: '2026-10-11T02:41:11+00:00'
  notes: null
  description: The organisation behind SecureDrop and the newsroom-security training around it; this is
    its own site.
- name: Mullvad VPN
  category: privacy-infra
  access: public
  homepage: https://mullvad.net/
  onion: o54hon2e2vj6c7m3aqqu6uyece65by3vgoxxhlqlsvkmacw6a7m7kiad.onion
  onion_url: http://o54hon2e2vj6c7m3aqqu6uyece65by3vgoxxhlqlsvkmacw6a7m7kiad.onion/en
  provenance:
    tier: 1
    type: onion-location-header
    source: https://mullvad.net/en
    verified_at: '2026-10-11T03:30:25+00:00'
  liveness:
    verdict: LIVE
    http: '200'
    attempts: 1
    passes: 1
    evidence: HTTP 200 over Tor, 1 successful attempt(s)
    checked_at: '2026-10-11T02:41:13+00:00'
  notes: null
  description: Swedish no-logs VPN that issues account numbers instead of email addresses and takes cash.
- name: OnionShare
  category: privacy-infra
  access: public
  homepage: https://onionshare.org/
  onion: lldan5gahapx5k7iafb3s4ikijc4ni7gx5iywdflkba5y2ezyg6sjgyd.onion
  onion_url: http://lldan5gahapx5k7iafb3s4ikijc4ni7gx5iywdflkba5y2ezyg6sjgyd.onion/
  provenance:
    tier: 1
    type: onion-location-header
    source: https://onionshare.org/
    verified_at: '2026-10-11T03:30:25+00:00'
  liveness:
    verdict: LIVE
    http: '200'
    attempts: 1
    passes: 1
    evidence: HTTP 200 over Tor, 1 successful attempt(s)
    checked_at: '2026-10-11T02:41:16+00:00'
  notes: null
  description: Tool for sending files, hosting a site or chatting directly over Tor, with no server in
    between.
- name: Qubes OS
  category: privacy-infra
  access: public
  homepage: https://www.qubes-os.org/
  onion: qubesosfasa4zl44o4tws22di6kepyzfeqv3tg4e3ztknltfxqrymdad.onion
  onion_url: http://qubesosfasa4zl44o4tws22di6kepyzfeqv3tg4e3ztknltfxqrymdad.onion/
  provenance:
    tier: 1
    type: onion-location-header
    source: https://www.qubes-os.org/
    verified_at: '2026-10-11T03:30:25+00:00'
  liveness:
    verdict: LIVE
    http: '200'
    attempts: 1
    passes: 1
    evidence: HTTP 200 over Tor, 1 successful attempt(s)
    checked_at: '2026-10-11T02:41:26+00:00'
  notes: null
  description: Desktop operating system that isolates each activity in its own disposable virtual machine.
- name: Tor Project
  category: privacy-infra
  access: public
  homepage: https://www.torproject.org/
  onion: 2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion
  onion_url: http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html
  provenance:
    tier: 1
    type: onion-location-header
    source: https://www.torproject.org/
    verified_at: '2026-10-11T03:30:25+00:00'
  liveness:
    verdict: LIVE
    http: '200'
    attempts: 1
    passes: 1
    evidence: HTTP 200 over Tor, 1 successful attempt(s)
    checked_at: '2026-10-11T02:41:28+00:00'
  notes: null
  description: 'The Tor software itself: browser downloads, relay documentation and the project''s own
    site.'
- name: Whonix
  category: privacy-infra
  access: public
  homepage: https://www.whonix.org/
  onion: www.dds6qkxpwdeubwucdiaord2xgbbeyds25rbsgr73tbfpqpt4a6vjwsyd.onion
  onion_url: http://www.dds6qkxpwdeubwucdiaord2xgbbeyds25rbsgr73tbfpqpt4a6vjwsyd.onion
  provenance:
    tier: 1
    type: onion-location-header
    source: https://www.whonix.org/
    verified_at: '2026-10-11T03:30:25+00:00'
  liveness:
    verdict: LIVE
    http: '200'
    attempts: 1
    passes: 1
    evidence: HTTP 200 over Tor, 1 successful attempt(s)
    checked_at: '2026-10-11T02:41:35+00:00'
  notes: Advertised with a 'www.' hostname prefix; confirmed to resolve correctly over Tor (strict 56-char
    validators false-positive here).
  description: Operating system split into a Tor gateway and a workstation, so an application leak cannot
    reach the network.
- name: Ahmia
  category: search
  access: public
  homepage: https://ahmia.fi/
  onion: juhanurmihxlp77nkq76byazcldy2hlmovfu2epvl5ankdibsot4csyd.onion
  onion_url: http://juhanurmihxlp77nkq76byazcldy2hlmovfu2epvl5ankdibsot4csyd.onion/
  provenance:
    tier: 1
    type: onion-location-header
    source: https://ahmia.fi/
    verified_at: '2026-10-11T03:30:25+00:00'
  liveness:
    verdict: LIVE
    http: '200'
    attempts: 1
    passes: 1
    evidence: HTTP 200 over Tor, 1 successful attempt(s)
    checked_at: '2026-10-11T02:42:29+00:00'
  notes: null
  description: Search engine for onion services that filters abusive content rather than indexing everything.
- name: Brave Search
  category: search
  access: public
  homepage: https://search.brave.com/
  onion: search.brave4u7jddbv7cyviptqjc7jusxh72uik7zt6adtckl5f4nwy2v72qd.onion
  onion_url: https://search.brave4u7jddbv7cyviptqjc7jusxh72uik7zt6adtckl5f4nwy2v72qd.onion/
  provenance:
    tier: 1
    type: onion-location-header
    source: https://search.brave.com/
    verified_at: '2026-10-11T03:30:25+00:00'
  liveness:
    verdict: LIVE
    http: '200'
    attempts: 1
    passes: 1
    evidence: HTTP 200 over Tor, 1 successful attempt(s)
    checked_at: '2026-10-11T02:42:36+00:00'
  notes: null
  description: Independent web index from Brave Software, built from its own crawler rather than resold
    results.
- name: Kagi
  category: search
  access: public
  homepage: https://kagi.com/
  onion: kagi2pv5bdcxxqla5itjzje2cgdccuwept5ub6patvmvn3qgmgjd6vid.onion
  onion_url: http://kagi2pv5bdcxxqla5itjzje2cgdccuwept5ub6patvmvn3qgmgjd6vid.onion/
  provenance:
    tier: 2
    type: own-domain-publication
    source: https://blog.kagi.com/kagi-privacy-pass
    verified_at: '2026-10-11T03:30:25+00:00'
  liveness:
    verdict: LIVE
    http: '200'
    attempts: 1
    passes: 1
    evidence: HTTP 200 over Tor, 1 successful attempt(s)
    checked_at: '2026-10-11T02:42:41+00:00'
  notes: Address published on the org's own domain but NOT advertised via Onion-Location.
  description: Paid, advertising-free search engine; admitted on its own documentation rather than an
    onion header.
- name: MetaGer
  category: search
  access: public
  homepage: https://metager.org/
  onion: metagerv65pwclop2rsfzg4jwowpavpwd6grhhlvdgsswvo6ii4akgyd.onion
  onion_url: http://metagerv65pwclop2rsfzg4jwowpavpwd6grhhlvdgsswvo6ii4akgyd.onion/en-US
  provenance:
    tier: 1
    type: onion-location-header
    source: https://metager.org/
    verified_at: '2026-10-11T03:30:25+00:00'
  liveness:
    verdict: LIVE
    http: '200'
    attempts: 1
    passes: 1
    evidence: HTTP 200 over Tor, 1 successful attempt(s)
    checked_at: '2026-10-11T02:42:46+00:00'
  notes: null
  description: German non-profit meta-search from SUMA-EV, funded by memberships and donations rather
    than ads.
- name: Debian
  category: software
  access: public
  homepage: https://www.debian.org/
  onion: null
  onion_url: https://onion.debian.org/
  provenance:
    tier: 1
    type: own-verifier-site
    source: https://onion.debian.org/
    verified_at: '2026-10-11T03:30:25+00:00'
  liveness:
    verdict: N/A
    http: ''
    attempts: 0
    passes: 0
    evidence: no single address — org publishes its own signed list
    checked_at: null
  notes: Debian operates onion.debian.org, its own signed onion-address verifier, listing 109 Debian onion
    mirrors. This is the reference implementation of a verified onion directory — study its signing and
    publication model before designing ours.
  description: The Debian GNU/Linux distribution publish their own signed list of onion mirrors for packages
    and install images.
- name: F-Droid
  category: software
  access: public
  homepage: https://f-droid.org/
  onion: fdroidorg6cooksyluodepej4erfctzk7rrjpjbbr6wx24jh3lqyfwyd.onion
  onion_url: http://fdroidorg6cooksyluodepej4erfctzk7rrjpjbbr6wx24jh3lqyfwyd.onion/index.html.en
  provenance:
    tier: 1
    type: onion-location-header
    source: https://f-droid.org/
    verified_at: '2026-10-11T03:30:25+00:00'
  liveness:
    verdict: LIVE
    http: '200'
    attempts: 1
    passes: 1
    evidence: HTTP 200 over Tor, 1 successful attempt(s)
    checked_at: '2026-10-11T02:42:48+00:00'
  notes: null
  description: 'Free-software Android app repository: install and update apps without a Google account.'
- name: Aftenposten — SecureDrop
  category: whistleblowing
  access: public
  homepage: https://www.aftenposten.no/
  onion: tiykfvhb562gheutfnedysnhrxpxoztyszkqyroloyepwzxmxien77id.onion
  onion_url: http://tiykfvhb562gheutfnedysnhrxpxoztyszkqyroloyepwzxmxien77id.onion/
  provenance:
    tier: 2
    type: own-domain-publication
    source: https://www.aftenposten.no/securedrop
    verified_at: '2026-10-11T03:30:25+00:00'
  liveness:
    verdict: LIVE
    http: '200'
    attempts: 2
    passes: 1
    evidence: HTTP 200 over Tor, 1 successful attempt(s)
    checked_at: '2026-10-11T02:44:18+00:00'
  notes: Address published on the org's own domain but NOT advertised via Onion-Location.
  description: Aftenposten is Norway's largest subscription newspaper. This address is its SecureDrop
    tip line — a submission point for documents, not a browsable site.
- name: Aftonbladet — SecureDrop
  category: whistleblowing
  access: public
  homepage: https://www.aftonbladet.se/
  onion: xm33ge4kupk5o66eqxcd2r4fqcplpqb2sbdduf5z2nw4g2jrxe57luid.onion
  onion_url: http://xm33ge4kupk5o66eqxcd2r4fqcplpqb2sbdduf5z2nw4g2jrxe57luid.onion/
  provenance:
    tier: 2
    type: own-domain-publication
    source: https://www.aftonbladet.se/securedrop/
    verified_at: '2026-10-11T03:30:25+00:00'
  liveness:
    verdict: LIVE
    http: '200'
    attempts: 1
    passes: 1
    evidence: HTTP 200 over Tor, 1 successful attempt(s)
    checked_at: '2026-10-11T02:44:20+00:00'
  notes: Address published on the org's own domain but NOT advertised via Onion-Location.
  description: Aftonbladet is a Swedish tabloid daily. This address is its SecureDrop tip line — a submission
    point for documents, not a browsable site.
- name: Al Jazeera — SecureDrop
  category: whistleblowing
  access: public
  homepage: https://www.aljazeera.com/
  onion: ivoj4zpse4n23bb4efvrzwsaxa3vojszviilhyjyeyafxnoupsnogaqd.onion
  onion_url: http://ivoj4zpse4n23bb4efvrzwsaxa3vojszviilhyjyeyafxnoupsnogaqd.onion/
  provenance:
    tier: 2
    type: own-domain-publication
    source: https://www.aljazeera.com/tips/
    verified_at: '2026-10-11T03:30:25+00:00'
  liveness:
    verdict: TIMEOUT
    http: ''
    attempts: 2
    passes: 1
    evidence: last verdict TIMEOUT across 2 attempt(s)
    checked_at: '2026-10-11T02:45:50+00:00'
  notes: Address published on the org's own domain but NOT advertised via Onion-Location.
  description: Al Jazeera is the Qatar-based international news network. This address is its SecureDrop
    tip line — a submission point for documents, not a browsable site.
- name: Associated Press — SecureDrop
  category: whistleblowing
  access: public
  homepage: https://www.ap.org/
  onion: kutj6adn66vdrpauox236wbc6g52ogg3pl4nfb5bfx7gzdgnqvhsl2qd.onion
  onion_url: http://kutj6adn66vdrpauox236wbc6g52ogg3pl4nfb5bfx7gzdgnqvhsl2qd.onion/
  provenance:
    tier: 2
    type: own-domain-publication
    source: https://www.ap.org/tips/
    verified_at: '2026-10-11T03:30:25+00:00'
  liveness:
    verdict: LIVE
    http: '200'
    attempts: 1
    passes: 1
    evidence: HTTP 200 over Tor, 1 successful attempt(s)
    checked_at: '2026-10-11T02:45:54+00:00'
  notes: Address published on the org's own domain but NOT advertised via Onion-Location.
  description: The Associated Press is the US non-profit news agency whose copy feeds much of the world's
    press. This address is its SecureDrop tip line — a submission point for documents, not a browsable
    site.
- name: Bloomberg News — SecureDrop
  category: whistleblowing
  access: public
  homepage: https://www.bloomberg.com/
  onion: ogdwaroarq4p6rnfn2hl4crvldyruyc2g24435qtxmd3twhevg7dsqid.onion
  onion_url: http://ogdwaroarq4p6rnfn2hl4crvldyruyc2g24435qtxmd3twhevg7dsqid.onion/
  provenance:
    tier: 2
    type: own-domain-publication
    source: https://www.bloomberg.com/tips/
    verified_at: '2026-10-11T03:30:25+00:00'
  liveness:
    verdict: LIVE
    http: '200'
    attempts: 1
    passes: 1
    evidence: HTTP 200 over Tor, 1 successful attempt(s)
    checked_at: '2026-10-11T02:45:59+00:00'
  notes: Address published on the org's own domain but NOT advertised via Onion-Location.
  description: Bloomberg News is the financial news division of Bloomberg L.P. This address is its SecureDrop
    tip line — a submission point for documents, not a browsable site.
- name: CBC — SecureDrop
  category: whistleblowing
  access: public
  homepage: https://www.cbc.ca/
  onion: gppg43zz5d2yfuom3yfmxnnokn3zj4mekt55onlng3zs653ty4fio6qd.onion
  onion_url: http://gppg43zz5d2yfuom3yfmxnnokn3zj4mekt55onlng3zs653ty4fio6qd.onion/
  provenance:
    tier: 2
    type: own-domain-publication
    source: https://www.cbc.ca/securedrop
    verified_at: '2026-10-11T03:30:25+00:00'
  liveness:
    verdict: LIVE
    http: '200'
    attempts: 1
    passes: 1
    evidence: HTTP 200 over Tor, 1 successful attempt(s)
    checked_at: '2026-10-11T02:46:03+00:00'
  notes: Address published on the org's own domain but NOT advertised via Onion-Location.
  description: The Canadian Broadcasting Corporation is Canada's public broadcaster. This address is its
    SecureDrop tip line — a submission point for documents, not a browsable site.
- name: Dagbladet — SecureDrop
  category: whistleblowing
  access: public
  homepage: https://www.dagbladet.no/
  onion: ydbpz5knb6ji3bdtahhm3wo7sed6lsy5vqnwfpnhpez4bquvoexbz7qd.onion
  onion_url: http://ydbpz5knb6ji3bdtahhm3wo7sed6lsy5vqnwfpnhpez4bquvoexbz7qd.onion/
  provenance:
    tier: 2
    type: own-domain-publication
    source: https://www.dagbladet.no/securedrop/
    verified_at: '2026-10-11T03:30:25+00:00'
  liveness:
    verdict: LIVE
    http: '200'
    attempts: 2
    passes: 1
    evidence: HTTP 200 over Tor, 1 successful attempt(s)
    checked_at: '2026-10-11T02:47:33+00:00'
  notes: Address published on the org's own domain but NOT advertised via Onion-Location.
  description: Dagbladet is a Norwegian daily newspaper. This address is its SecureDrop tip line — a submission
    point for documents, not a browsable site.
- name: Der Spiegel — SecureDrop
  category: whistleblowing
  access: public
  homepage: https://www.spiegel.de/
  onion: q6vdlj2ukulrqk37piqgxucpcwtxzdjhvjzqrfbevuhrzimsgjltmpqd.onion
  onion_url: http://q6vdlj2ukulrqk37piqgxucpcwtxzdjhvjzqrfbevuhrzimsgjltmpqd.onion/
  provenance:
    tier: 2
    type: own-domain-publication
    source: https://www.spiegel.de/extra/so-nehmen-informanten-sicheren-kontakt-zum-spiegel-auf-a-1030502.html
    verified_at: '2026-10-11T03:30:25+00:00'
  liveness:
    verdict: LIVE
    http: '200'
    attempts: 1
    passes: 1
    evidence: HTTP 200 over Tor, 1 successful attempt(s)
    checked_at: '2026-10-11T02:47:36+00:00'
  notes: Address published on the org's own domain but NOT advertised via Onion-Location.
  description: Der Spiegel is the Hamburg-based German news magazine. This address is its SecureDrop tip
    line — a submission point for documents, not a browsable site.
- name: Forbes — SecureDrop
  category: whistleblowing
  access: public
  homepage: https://www.forbes.com/
  onion: 6zonlfhh7aqtfwoyvdlad3nxn6ljecx2k6tyyy3spt43nn54q6lvncid.onion
  onion_url: http://6zonlfhh7aqtfwoyvdlad3nxn6ljecx2k6tyyy3spt43nn54q6lvncid.onion/
  provenance:
    tier: 2
    type: own-domain-publication
    source: https://www.forbes.com/fdc/securedrop.html
    verified_at: '2026-10-11T03:30:25+00:00'
  liveness:
    verdict: LIVE
    http: '200'
    attempts: 1
    passes: 1
    evidence: HTTP 200 over Tor, 1 successful attempt(s)
    checked_at: '2026-10-11T02:48:21+00:00'
  notes: Address published on the org's own domain but NOT advertised via Onion-Location.
  description: Forbes is a US business magazine. This address is its SecureDrop tip line — a submission
    point for documents, not a browsable site.
- name: Greekleaks (Reporters United) — SecureDrop
  category: whistleblowing
  access: public
  homepage: https://reportersunited.gr/
  onion: jatasaqcoe7lqdpcyxo7vl3e5tdvl5jgmtadfat77i25qdj6z6a4ulad.onion
  onion_url: http://jatasaqcoe7lqdpcyxo7vl3e5tdvl5jgmtadfat77i25qdj6z6a4ulad.onion/
  provenance:
    tier: 2
    type: own-domain-publication
    source: https://reportersunited.gr/greekleaks/
    verified_at: '2026-10-11T03:30:25+00:00'
  liveness:
    verdict: LIVE
    http: '200'
    attempts: 1
    passes: 1
    evidence: HTTP 200 over Tor, 1 successful attempt(s)
    checked_at: '2026-10-11T02:48:27+00:00'
  notes: Address published on the org's own domain but NOT advertised via Onion-Location.
  description: Reporters United is a Greek investigative journalism network; Greekleaks is its leak channel.
    A submission point for documents, not a browsable site.
- name: NBC News — SecureDrop
  category: whistleblowing
  access: public
  homepage: https://www.nbcnews.com/
  onion: 4cjb3is6fnzgnwadeasmvk4oinukh6wqn2dmaggoz5kf6q3qoa6splid.onion
  onion_url: http://4cjb3is6fnzgnwadeasmvk4oinukh6wqn2dmaggoz5kf6q3qoa6splid.onion/
  provenance:
    tier: 2
    type: own-domain-publication
    source: https://www.nbcnews.com/tips/
    verified_at: '2026-10-11T03:30:25+00:00'
  liveness:
    verdict: LIVE
    http: '200'
    attempts: 1
    passes: 1
    evidence: HTTP 200 over Tor, 1 successful attempt(s)
    checked_at: '2026-10-11T02:48:29+00:00'
  notes: Address published on the org's own domain but NOT advertised via Onion-Location.
  description: NBC News is a US broadcast news network. This address is its SecureDrop tip line — a submission
    point for documents, not a browsable site.
- name: NRK — SecureDrop
  category: whistleblowing
  access: public
  homepage: https://www.nrk.no/
  onion: 537ztcntpbmspja4mkpxldpsoc46mqlssnsaklqnfw3gnlpj5glcjgid.onion
  onion_url: http://537ztcntpbmspja4mkpxldpsoc46mqlssnsaklqnfw3gnlpj5glcjgid.onion/
  provenance:
    tier: 2
    type: own-domain-publication
    source: https://www.nrk.no/varsle/
    verified_at: '2026-10-11T03:30:25+00:00'
  liveness:
    verdict: LIVE
    http: '200'
    attempts: 1
    passes: 1
    evidence: HTTP 200 over Tor, 1 successful attempt(s)
    checked_at: '2026-10-11T02:48:34+00:00'
  notes: Address published on the org's own domain but NOT advertised via Onion-Location.
  description: NRK is Norway's public broadcaster. This address is its SecureDrop tip line — a submission
    point for documents, not a browsable site.
- name: New York Times — SecureDrop
  category: whistleblowing
  access: public
  homepage: https://www.nytimes.com/
  onion: ej3kv4ebuugcmuwxctx5ic7zxh73rnxt42soi3tdneu2c2em55thufqd.onion
  onion_url: http://ej3kv4ebuugcmuwxctx5ic7zxh73rnxt42soi3tdneu2c2em55thufqd.onion/
  provenance:
    tier: 2
    type: own-domain-publication
    source: https://www.nytimes.com/tips
    verified_at: '2026-10-11T03:30:25+00:00'
  liveness:
    verdict: LIVE
    http: '200'
    attempts: 1
    passes: 1
    evidence: HTTP 200 over Tor, 1 successful attempt(s)
    checked_at: '2026-10-11T02:48:41+00:00'
  notes: Address published on the org's own domain but NOT advertised via Onion-Location.
  description: The New York Times is the US daily newspaper of record. This address is its SecureDrop
    tip line — a submission point for documents, not a browsable site.
- name: ProPublica — SecureDrop
  category: whistleblowing
  access: public
  homepage: https://www.propublica.org/
  onion: 33xu4yhum2eiisxm6fntaslayop76fvaqgt3ak5dakdm3t7cub25cead.onion
  onion_url: http://33xu4yhum2eiisxm6fntaslayop76fvaqgt3ak5dakdm3t7cub25cead.onion/
  provenance:
    tier: 2
    type: own-domain-publication
    source: https://propublica.org/tips
    verified_at: '2026-10-11T03:30:25+00:00'
  liveness:
    verdict: LIVE
    http: '200'
    attempts: 1
    passes: 1
    evidence: HTTP 200 over Tor, 1 successful attempt(s)
    checked_at: '2026-10-11T02:48:48+00:00'
  notes: Address published on the org's own domain but NOT advertised via Onion-Location.
  description: ProPublica's tip line, separate from its news site address above. A submission point for
    documents, not a browsable site.
- name: SecureDrop
  category: whistleblowing
  access: public
  homepage: https://securedrop.org/
  onion: sdolvtfhatvsysc6l34d65ymdwxcujausv7k5jk4cy5ttzhjoi6fzvyd.onion
  onion_url: http://sdolvtfhatvsysc6l34d65ymdwxcujausv7k5jk4cy5ttzhjoi6fzvyd.onion/
  provenance:
    tier: 1
    type: onion-location-header
    source: https://securedrop.org/
    verified_at: '2026-10-11T03:30:25+00:00'
  liveness:
    verdict: LIVE
    http: '200'
    attempts: 1
    passes: 1
    evidence: HTTP 200 over Tor, 1 successful attempt(s)
    checked_at: '2026-10-11T02:48:54+00:00'
  notes: null
  description: The open-source whistleblower submission system that newsrooms install; this is the project's
    own site and documentation.
- name: Süddeutsche Zeitung — SecureDrop
  category: whistleblowing
  access: public
  homepage: https://www.sueddeutsche.de/
  onion: udhauo3m3fh7v6yfiuornjzxn3fh6vlp4ooo3wogvghcnv5xik6mnayd.onion
  onion_url: http://udhauo3m3fh7v6yfiuornjzxn3fh6vlp4ooo3wogvghcnv5xik6mnayd.onion/
  provenance:
    tier: 2
    type: own-domain-publication
    source: https://www.sueddeutsche.de/projekte/kontakt/
    verified_at: '2026-10-11T03:30:25+00:00'
  liveness:
    verdict: LIVE
    http: '200'
    attempts: 1
    passes: 1
    evidence: HTTP 200 over Tor, 1 successful attempt(s)
    checked_at: '2026-10-11T02:48:57+00:00'
  notes: Address published on the org's own domain but NOT advertised via Onion-Location.
  description: Süddeutsche Zeitung is the Munich-based German daily. This address is its SecureDrop tip
    line — a submission point for documents, not a browsable site.
- name: The Globe and Mail — SecureDrop
  category: whistleblowing
  access: public
  homepage: https://www.theglobeandmail.com/
  onion: a4zum5ydurvljrohxqp2rjjal5kro4ge2q2qizuonf2jubkhcr627gad.onion
  onion_url: http://a4zum5ydurvljrohxqp2rjjal5kro4ge2q2qizuonf2jubkhcr627gad.onion/
  provenance:
    tier: 2
    type: own-domain-publication
    source: https://sec.theglobeandmail.com/securedrop/
    verified_at: '2026-10-11T03:30:25+00:00'
  liveness:
    verdict: LIVE
    http: '200'
    attempts: 2
    passes: 1
    evidence: HTTP 200 over Tor, 1 successful attempt(s)
    checked_at: '2026-10-11T02:50:27+00:00'
  notes: Address published on the org's own domain but NOT advertised via Onion-Location.
  description: The Globe and Mail is a Canadian national newspaper. This address is its SecureDrop tip
    line — a submission point for documents, not a browsable site.
- name: The Guardian — SecureDrop
  category: whistleblowing
  access: public
  homepage: https://www.theguardian.com/
  onion: xp44cagis447k3lpb4wwhcqukix6cgqokbuys24vmxmbzmaq2gjvc2yd.onion
  onion_url: http://xp44cagis447k3lpb4wwhcqukix6cgqokbuys24vmxmbzmaq2gjvc2yd.onion/
  provenance:
    tier: 2
    type: own-domain-publication
    source: https://www.theguardian.com/securedrop
    verified_at: '2026-10-11T03:30:25+00:00'
  liveness:
    verdict: LIVE
    http: '200'
    attempts: 1
    passes: 1
    evidence: HTTP 200 over Tor, 1 successful attempt(s)
    checked_at: '2026-10-11T02:50:30+00:00'
  notes: Address published on the org's own domain but NOT advertised via Onion-Location.
  description: The Guardian's tip line, separate from its news site address above. A submission point
    for documents, not a browsable site.
- name: Whistleblow.co — SecureDrop
  category: whistleblowing
  access: public
  homepage: https://www.whistleblow.co/
  onion: zuybtx2nop5cxfz4gyc7hzxpterf3pvf6zixe5cscajhlgqrexpkcoqd.onion
  onion_url: http://zuybtx2nop5cxfz4gyc7hzxpterf3pvf6zixe5cscajhlgqrexpkcoqd.onion/
  provenance:
    tier: 2
    type: own-domain-publication
    source: https://www.whistleblow.co/whistleblowco-securedrop/
    verified_at: '2026-10-11T03:30:25+00:00'
  liveness:
    verdict: LIVE
    http: '200'
    attempts: 1
    passes: 1
    evidence: HTTP 200 over Tor, 1 successful attempt(s)
    checked_at: '2026-10-11T02:50:37+00:00'
  notes: Address published on the org's own domain but NOT advertised via Onion-Location.
  description: Whistleblow.co is a commercial whistleblowing platform running an anonymous reporting channel
    for organisations. A submission point, not a browsable site.