Open-source investigations outlet that identifies people, weapons and events from public data.
FundingFunded by reader donations through its Dutch and US charitable foundations, plus grants.
Measured one at a time
Yardland lists .onion services run by real, identifiable organisations — newspapers, whistleblowing platforms, privacy projects, archives. Every address here was published by the organisation itself, and every one was checked to see whether it actually answers. Each entry shows its own evidence.
The short version, before the directory.
A yardland was a medieval English measure of land — a quarter of a hide, the acreage a team of two oxen could plough in a season. It was primarily a measure of assessment rather than area. Someone walked the ground, checked the boundaries, and wrote down what was actually there. Yardland takes its name from the measuring, not the land.
Finding a legitimate onion service is oddly hard. Search engines on the Tor network are unfiltered, so the real thing sits beside phishing clones of itself. Link lists go stale within weeks. And organisations retire onion services without updating the page that announced them, so their own documentation keeps pointing at addresses that no longer answer. A directory is only useful if someone re-checks it.
So that is all Yardland does. It does not crawl the onion web and it does not index it. For each entry it records who published the address, what kind of proof that is, and what happened when we tried to reach it.
No keyword index, no crawling, no results page. If you want to search the onion web, that is a different tool with different problems.
A list is a claim with no date on it. Every entry here carries its provenance and the result of its last liveness check.
Nobody can pay, petition or post their way in. An address is listed only if the organisation publishes it and it can be independently confirmed.
Two kinds of evidence are accepted. A third is explicitly rejected.
Their own HTTPS website tells Tor Browser that an onion version exists — either with an
Onion-Location response header, or with an equivalent <meta>
tag. This is a live assertion from the organisation itself, which makes it the strongest
signal available. It is also the only kind that cannot quietly go stale, because it is
served fresh with every visit.
The address appears somewhere on the organisation's own domain — documentation, a blog post, a support page. Still first-party, but unchecked by design: nobody updates those pages when a service is retired. Tier 2 entries are therefore always liveness-tested before they appear, and all three of Yardland's unreachable findings came from this tier or from a stale tag.
Forums, aggregators, other directories, someone's summary blog post. Not accepted, ever. An address that only exists because a third party copied it is exactly how phishing addresses get laundered into looking official.
Two labels look similar and mean opposite things. Conflating them is how a directory starts lying to people.
49 entries across 9 categories. Every address below was re-probed in a single serial pass through Tor, most recently 5 November 2026, 04:25 UTC — each entry states when it was checked and what happened. Addresses are shown as plain text and are deliberately not hyperlinked here. Clicking an onion link in an ordinary browser can leak a DNS lookup and rarely works anyway — use the copy button beside each address, or select the address itself with one tap, and paste it into Tor Browser.
Listing is not an endorsement. An entry is here because an identifiable organisation published the address itself and it answered when checked — not because of its aims, politics or reputation. Nothing is ranked or recommended; entries are ordered alphabetically inside each category, and every one carries the same fields and the same treatment. How entries are admitted, and what listing does not mean.
Open-source investigations outlet that identifies people, weapons and events from public data.
FundingFunded by reader donations through its Dutch and US charitable foundations, plus grants.
Germany's public international broadcaster; publisher-run onion edition of its news site.
FundingFunded from the German federal budget as public broadcasting, not by subscriptions or advertising.
Advertised with a 'www.' hostname prefix; confirmed to resolve correctly over Tor (strict 56-char validators false-positive here).
die tageszeitung, the Berlin-based reader-owned daily newspaper; onion edition.
FundingReader-owned: funded by its cooperative of subscribers, plus advertising.
US non-profit investigative newsroom; this address is the news site itself.
FundingA non-profit newsroom funded by foundation grants and reader donations.
Address published on the org's own domain but NOT advertised via Onion-Location. Docs pages are not updated when a service is retired, so tier-2 addresses must be liveness-gated before publication.
Radio Free Europe/Radio Liberty, the US-funded broadcaster aimed at countries with restricted media.
FundingFunded by the US Congress through a federal grant.
Advertised with a 'www.' hostname prefix; confirmed to resolve correctly over Tor (strict 56-char validators false-positive here).
British daily newspaper; publisher-run onion edition of the news site.
FundingOwned by the Scott Trust and funded by reader contributions, subscriptions and advertising.
Advertised with a 'www.' hostname prefix; confirmed to resolve correctly over Tor (strict 56-char validators false-positive here). ADVERTISED-BUT-UNREACHABLE: the organisation still serves this address, but Tor cannot reach the service. Report upstream.
US government-funded international broadcaster; onion edition of its news site.
FundingFunded by the US Congress.
Advertised with a 'www.' hostname prefix; confirmed to resolve correctly over Tor (strict 56-char validators false-positive here).
Aftenposten is Norway's largest subscription newspaper. This address is its SecureDrop tip line — a submission point for documents, not a browsable site.
FundingPart of the Schibsted media group and funded by subscriptions and advertising.
Address published on the org's own domain but NOT advertised via Onion-Location.
Aftonbladet is a Swedish tabloid daily. This address is its SecureDrop tip line — a submission point for documents, not a browsable site.
FundingPart of the Schibsted media group and funded by subscriptions and advertising.
Address published on the org's own domain but NOT advertised via Onion-Location.
The Associated Press is the US non-profit news agency whose copy feeds much of the world's press. This address is its SecureDrop tip line — a submission point for documents, not a browsable site.
FundingA non-profit cooperative owned by its member news organisations, funded by member fees and by licensing its journalism.
Address published on the org's own domain but NOT advertised via Onion-Location.
Bloomberg News is the financial news division of Bloomberg L.P. This address is its SecureDrop tip line — a submission point for documents, not a browsable site.
FundingFunded by Bloomberg L.P., the private company behind the financial-data terminal business.
Address published on the org's own domain but NOT advertised via Onion-Location.
The Canadian Broadcasting Corporation is Canada's public broadcaster. This address is its SecureDrop tip line — a submission point for documents, not a browsable site.
FundingFunded mainly by a Canadian parliamentary appropriation as public broadcasting, plus advertising.
Address published on the org's own domain but NOT advertised via Onion-Location.
Dagbladet is a Norwegian daily newspaper. This address is its SecureDrop tip line — a submission point for documents, not a browsable site.
FundingFunded by subscriptions and advertising; part of Aller Media.
Address published on the org's own domain but NOT advertised via Onion-Location.
Der Spiegel is the Hamburg-based German news magazine. This address is its SecureDrop tip line — a submission point for documents, not a browsable site.
FundingFunded by subscriptions and advertising; the publisher is partly owned by its own staff.
Address published on the org's own domain but NOT advertised via Onion-Location.
Forbes is a US business magazine. This address is its SecureDrop tip line — a submission point for documents, not a browsable site.
FundingFunded by advertising and subscriptions, including its paid advisor and affiliate businesses.
Address published on the org's own domain but NOT advertised via Onion-Location.
Reporters United is a Greek investigative journalism network; Greekleaks is its leak channel. A submission point for documents, not a browsable site.
FundingReporters United is a Greek non-profit company funded by memberships, grants and revenue-sharing with other outlets.
Address published on the org's own domain but NOT advertised via Onion-Location.
NBC News is a US broadcast news network. This address is its SecureDrop tip line — a submission point for documents, not a browsable site.
FundingFunded by NBCUniversal, part of Comcast, through advertising and pay-television revenue.
Address published on the org's own domain but NOT advertised via Onion-Location.
The New York Times is the US daily newspaper of record. This address is its SecureDrop tip line — a submission point for documents, not a browsable site.
FundingA publicly traded company funded by subscriptions and advertising.
Address published on the org's own domain but NOT advertised via Onion-Location.
News24 is South Africa's largest news website. This address is its SecureDrop tip line — a submission point for documents, not a browsable site.
FundingFunded by subscriptions and advertising as part of the Media24 group, which is majority-owned by Naspers.
Address published on the org's own domain but NOT advertised via Onion-Location.
ProPublica's tip line, separate from its news site address above. A submission point for documents, not a browsable site.
FundingA non-profit newsroom funded by foundation grants and reader donations.
Address published on the org's own domain but NOT advertised via Onion-Location.
The open-source whistleblower submission system that newsrooms install; this is the project's own site and documentation.
FundingThe project is run by the Freedom of the Press Foundation, a non-profit funded by donations and foundation grants.
Süddeutsche Zeitung is the Munich-based German daily. This address is its SecureDrop tip line — a submission point for documents, not a browsable site.
FundingFunded by subscriptions and advertising.
Address published on the org's own domain but NOT advertised via Onion-Location.
The Globe and Mail is a Canadian national newspaper. This address is its SecureDrop tip line — a submission point for documents, not a browsable site.
FundingFunded by subscriptions and advertising; owned by the Thomson family's Woodbridge holding company.
Address published on the org's own domain but NOT advertised via Onion-Location.
The Guardian's tip line, separate from its news site address above. A submission point for documents, not a browsable site.
FundingOwned by the Scott Trust and funded by reader contributions, subscriptions and advertising.
Address published on the org's own domain but NOT advertised via Onion-Location.
The Wall Street Journal is the US business newspaper. This address is its SecureDrop tip line — a submission point for documents, not a browsable site.
FundingFunded by subscriptions and advertising as part of Dow Jones, owned by News Corp.
Address published on the org's own domain but NOT advertised via Onion-Location.
Whistleblow.co is a commercial whistleblowing platform running an anonymous reporting channel for organisations. A submission point, not a browsable site.
FundingOperated as a commercial service rather than a non-profit or charity.
Address published on the org's own domain but NOT advertised via Onion-Location.
Al Jazeera is the Qatar-based international news network. This address is its SecureDrop tip line — a submission point for documents, not a browsable site.
FundingFunded by the Qatari state.
Address published on the org's own domain but NOT advertised via Onion-Location. Docs pages are not updated when a service is retired, so tier-2 addresses must be liveness-gated before publication.
NRK is Norway's public broadcaster. This address is its SecureDrop tip line — a submission point for documents, not a browsable site.
FundingFunded by public money from the Norwegian state as public broadcasting.
Address published on the org's own domain but NOT advertised via Onion-Location. Docs pages are not updated when a service is retired, so tier-2 addresses must be liveness-gated before publication.
The organisation behind SecureDrop and the newsroom-security training around it; this is its own site.
FundingA non-profit funded by donations and foundation grants; it also runs SecureDrop.
Swedish no-logs VPN that issues account numbers instead of email addresses and takes cash.
FundingFunded entirely by the fees its VPN customers pay; it takes no advertising and has no outside investors.
Tool for sending files, hosting a site or chatting directly over Tor, with no server in between.
FundingA free open-source project funded by donations.
Desktop operating system that isolates each activity in its own disposable virtual machine.
FundingFunded by donations; the project states it earns no revenue from selling software.
The Tor software itself: browser downloads, relay documentation and the project's own site.
FundingA US 501(c)(3) non-profit funded by donations and grants, including government and foundation grants.
Operating system split into a Tor gateway and a workstation, so an application leak cannot reach the network.
FundingFunded by donations plus a paid support offering.
Advertised with a 'www.' hostname prefix; confirmed to resolve correctly over Tor (strict 56-char validators false-positive here).
Metadata-resistant messaging from the Open Privacy Research Society — no phone number and no central server holding the conversation.
FundingBuilt by the Open Privacy Research Society, a Canadian non-profit funded by donations and grants.
Volunteer-run collective offering email, cloud storage, XMPP and search on free software, funded by donations.
FundingFunded by donations from its users; the collective states it carries no advertising and does not sell or profile data.
Encrypted email, calendar, drive and VPN from Proton AG, reached here without touching the clearnet.
FundingOperated by Proton AG, whose primary shareholder is the non-profit Proton Foundation; the company states it has no venture capital investors.
Activist-run email, mailing lists and VPN collectives; accounts are not tied to a phone number or a third party.
FundingA US non-profit under section 501(c)(4), funded by donations from the individuals and groups that use it.
German tech collective providing mail, pads and hosting to activists and civil-society groups.
FundingFunded by donations from the activists and civil-society groups it serves.
Encrypted chat, file sharing and public identity proofs, now owned by Zoom.
FundingFunded as part of Zoom, which acquired it in 2020.
Address published on the org's own domain but NOT advertised via Onion-Location. Docs pages are not updated when a service is retired, so tier-2 addresses must be liveness-gated before publication.
Search engine for onion services that filters abusive content rather than indexing everything.
FundingA research project run by its founder, Juha Nurmi, rather than a company, and its site names no funders.
Independent web index from Brave Software, built from its own crawler rather than resold results.
FundingFunded by Brave Software's advertising platform and paid products; the search index is the company's own.
Privacy-focused search engine that does not build a profile of its users; this onion serves the same search without a clearnet lookup.
FundingFunded by search advertising through its own ad network and by its paid Privacy Pro subscription; the company is privately held.
The address appears in the site's Content-Security-Policy header, which anyone can check with `curl -I https://duckduckgo.com/`. It is stable across requests, and a check that reads only the page body misses it.
Paid, advertising-free search engine; admitted on its own documentation rather than an onion header.
FundingFunded by user subscriptions; the company states it takes no advertising.
Address published on the org's own domain but NOT advertised via Onion-Location.
German non-profit meta-search from SUMA-EV, funded by memberships and donations rather than ads.
FundingA project of the non-profit SUMA-EV, funded by memberships and donations rather than advertising.
The Internet Archive's own onion: the Wayback Machine plus its text, audio and software collections, reachable without a clearnet lookup.
FundingA US non-profit library, funded by donations, grants and foundation support.
ADVERTISED-BUT-UNREACHABLE: the organisation still serves this address, but Tor cannot reach the service. Report upstream.
Free-software Android app repository: install and update apps without a Google account.
FundingFunded by donations from its users.
The Debian GNU/Linux distribution publish their own signed list of onion mirrors for packages and install images.
FundingVolunteer-run and funded by donations, held in trust by the non-profit Software in the Public Interest.
The Monero privacy-focused cryptocurrency project: wallets, documentation and downloads.
FundingFunded by community donations through its general fund; the project has no company, no investors and no pre-mined coins.
ADVERTISED-BUT-UNREACHABLE: the organisation still serves this address, but Tor cannot reach the service. Report upstream.
An address being here is not an endorsement. Yardland records who published an address and whether it answered. It does not vouch for what a service does, who runs it, or whether it is safe. Verify anything important out of band — ideally against a signature the organisation publishes elsewhere.
A listing is a snapshot, not a guarantee. The onion web changes daily. Every check is timestamped; treat the timestamp as the expiry on the claim.
Addresses are cryptographic. A v3 onion address is the service's public key. You cannot tell a real address from a fake one by looking — real and fake are equally random strings. That is why provenance, not appearance, is the only real defence, and it is the thing this site actually checks.