List of SecureDrops "in the wild"


#1

Hi all,

In coming weeks, we will be doing additional work on the SecureDrop directory to make it easier to add SecureDrop instances with no obvious egregious security deficiencies (e.g., no HTTPS on landing page, outdated version of SecureDrop). The plan is to show appropriate warnings for other significant issues we can detect (e.g., third party resources on landing page).

We do have an internal list of all SecureDrops “in the wild” that’s significantly larger than the directory. There’s nothing confidential about this list — these are publicly advertised websites — but for instances not in our directory, we haven’t done any vetting of any kind. With that caveat, I wanted to share this list for public feedback, in case it’s useful but also in case you can discover other publicly advertised SecureDrops we don’t already know about.

I don’t plan to share this list regularly, since we’ll hopefully get most of these in the directory as part of the directory improvements mentioned above. If we’re missing any publicly advertised instance, I’d appreciate hearing about them. :slight_smile:

NB: We may want to unlist this forum post after a while, just so it doesn’t attract search engine traffic to outdated information.

Cheers,
Erik

Up and running

Adresseavisen
SecureDrop address: xpx3m5hcnrkds5wg.onion
Landing page: https://securedrop.adressa.no/

Aftenposten
SecureDrop address: bocl4xqbak4xvlh4.onion
Landing page: https://www.aftenposten.no/securedrop/


SecureDrop address: zdf4nikyuswdzbt6.onion
Landing page: https://www.apache.be/securedrop

Associated Press
SecureDrop address: 3expgpdnrrzezf7r.onion
Landing page: https://www.ap.org/tips/

The Atlantic
SecureDrop address: s6xle2dgrsqcxiwb.onion
Landing page: https://www.theatlantic.com/tips/

Barton Gellman
SecureDrop address: mqddpn6yt4f5uqei.onion
Landing page: https://github.com/b4rton/securedrop

Bergens Tidende
SecureDrop address: mxrrw2l3g5dyhgzn.onion
Landing page: https://www.bt.no/securedrop/

Bloomberg News
SecureDrop address: m4hynbhhctdk27jr.onion
Landing page: https://www.bloomberg.com/tips

Bloomberg BNA
SecureDrop address: efl3aizqpowu2yj5.onion
Landing page: https://www.bna.com/tips

Business Insider
SecureDrop address: doaxi7t7lkctvq5i.onion
Landing page: https://www.businessinsider.com/how-to-tip-business-insider-securely-guide-signal-securedrop-2017-6

BuzzFeed
SecureDrop address: ftugftwajmgsmoau.onion
Landing page: https://contact.buzzfeed.com

Canadian Broadcasting Corporation News
SecureDrop address: ad2ztmbv5vmbj7ic.onion
Landing page: https://securedrop.cbc.ca/

Coworker.org
SecureDrop address: no4gurk7efg4abwv.onion
Landing page: https://home.coworker.org/contact/

Center for Public Integrity
SecureDrop address: v2d6nf2nsvvbgaqe.onion
Landing page: https://www.publicinegrity.org/securedrop

Dagbladet
SecureDrop address: mz33367mcdrcdi7s.onion
Landing page: https://securedrop.dagbladet.no

DuckDuckGo
SecureDrop address: dmys7duszeb2salo.onion
Landing page: https://duckduckgo.com/securedrop/

The Daily Beast
SecureDrop address: bcwyjiwj25t44it6.onion
Landing page: https://www.thedailybeast.com/tips

Espen Andersen
SecureDrop address: espenav2n45atpsj.onion
Landing page: https://espenandersen.no/contact

ExposeFacts
SecureDrop address: znig4bc5rlwyj4mz.onion
Landing page: https://exposefacts.org/

Fairfax Media
SecureDrop address: ipfhnseo4hgfw5mg.onion
Landing page: https://securedrop.fairfax.com.au/

Forbidden Stories
SecureDrop address: w7t5f3u4mej6dvpt.onion
Landing page: https://forbiddenstories.org/protect-your-stories/

Field of Vision
SecureDrop address: fovisionunz7mtxw.onion
Landing page: https://fieldofvision.org/securedrop

Forbes
SecureDrop address: t5pv5o4t6jyjilp6.onion
Landing page: https://www.forbes.com/fdc/securedrop.html

Foreign Policy
SecureDrop address: ghs7kwtznbq6t2su.onion
Landing page: https://foreignpolicy.com/tips/

Financial Times
SecureDrop address: xdm7flvwt3uvsrrd.onion
Landing page: https://www.ft.com/news-tips/

Gizmodo Media Group
SecureDrop address: gmg7jl25ony5g7ws.onion
Landing page: https://specialprojectsdesk.com/securedrop/

Greenpeace
SecureDrop address: ll6edwtpfl3zdwoi.onion
Landing page: https://securedrop.greenpeace.org.nz

The Guardian
SecureDrop address: 33y6fjyhs3phzfjj.onion
Landing page: https://securedrop.theguardian.com/

Houston Chronicle
SecureDrop address: ibnfpppyydd6mg46.onion
Landing page: https://newstips.houstonchronicle.com/

HuffPost
SecureDrop address: rbugf2rz5lmjbfun.onion
Landing page: https://img.huffingtonpost.com/securedrop

The Intercept
SecureDrop address: intrcept32ncblef.onion
Landing page: https://theintercept.com/source/#securedrop

Jean-Marc Manach
SecureDrop address: 32qfx2skzcifeyg7.onion
Landing page: https://jean-marc.manach.net/securedrop.htm

Kevin Poulsen
SecureDrop address: poulsensqiv6ocq4.onion
Landing page: https://freedom.press/about/tech/kevin-poulsen

KUOW Public Radio
SecureDrop address: hcxmf67v3ltykmww.onion
Landing page: https://medium.com/@kuow/how-whistleblowers-can-contact-kuow-3ed089e21d30

Lucy Parsons Labs
SecureDrop address: qn4qfeeslglmwxgb.onion
Landing page: https://lucyparsonslabs.com/securedrop

McClatchy DC
SecureDrop address: zafull3et6muayeh.onion
Landing page: http://www.mcclatchydc.com/customer-service/contact-us/

Morgenbladet
SecureDrop address: g4wmrmqxpj5bnvml.onion
Landing page: https://morgenbladet.no/varsle

MormonLeaks (+FaithLeaks)
SecureDrop address: efeip5ekoqi4upkz.onion
Landing page: https://mormonleaks.io/

New Internationalist
SecureDrop address: axcdo2zaeyrpdc6z.onion
Landing page: https://digital.newint.com.au/securedrop

The New Yorker
SecureDrop address: icpozbs6r6yrwt67.onion
Landing page: https://projects.newyorker.com/securedrop/

The New York Times
SecureDrop address: nyttips4bmquxfzw.onion
Landing page: https://nytimes.com/tips

NPR
SecureDrop address: 5ha7oig7du2jeyer.onion
Landing page: https://help.npr.org/customer/en/portal/articles/2860413-got-a-confidential-news-tip-for-npr

NRK
SecureDrop address: nrkvarslekidu2uz.onion
Landing page: https://www.nrk.no/varsle/

Project On Government Oversight
SecureDrop address: dqeasamlf3jld2kz.onion
Landing page: https://securedrop.pogo.org/

Politico
SecureDrop address: mq2du34rci6arhbd.onion
Landing page: https://www.politico.com/news-tips/

Public Intelligence
SecureDrop address: arujlhu2zjjhc3bw.onion
Landing page: https://publicintelligence.net/contribute/

Radio24syv
SecureDrop address: hpjw636qnt5avq62.onion
Landing page: https://securedrop.radio24syv.dk/

Radio Canada
SecureDrop address: w5jfqhep2jbypkek.onion
Landing page: https://sourceanonyme.radio-canada.ca

Reuters
SecureDrop address: smb7p276iht3i2fj.onion
Landing page: https://www.reuters.com/investigates/special-report/tips/

Reveal
SecureDrop address: k4jn3q4ob77nefhv.onion
Landing page: https://leak.revealnews.org/

RISE Moldova
SecureDrop address: 6lhmirnluwmvjw4z.onion
Landing page: https://www.rise.md/leaks/

Schwartz Media
SecureDrop address: od2icdth5ceo32wq.onion
Landing page: https://www.themonthly.com.au/tips

Stuff Limited
SecureDrop address: ki3emfb55ywtg5tm.onion
Landing page: https://www.stuff.co.nz/securedrop

San Francisco Chronicle
SecureDrop address: nrwvazcz6figxpg5.onion
Landing page: https://newstips.sfchronicle.com/

Svenska Dagbladet
SecureDrop address: cnhuql7wj2ga5iv7.onion
Landing page: https://www.svd.se/securedrop/

The Telegraph
SecureDrop address: ldbtuktejbkg227d.onion
Landing page: https://www.telegraph.co.uk/news/investigations/contact-us/

The Globe and Mail
SecureDrop address: sml5wmpuq7ifq2mh.onion
Landing page: https://sec.theglobeandmail.com/securedrop

USA TODAY Network
SecureDrop address: usatodayw7vu5egc.onion
Landing page: https://newstips.usatoday.com/securedrop.html

VG
SecureDrop address: vgnettwin5lyl4yr.onion
Landing page: https://securedrop.vg.no

VICE Media
SecureDrop address: e3v3x57ykz25uvij.onion
Landing page: https://news.vice.com/securedrop/

The Verge [also used by Racked, Eater]
SecureDrop address: 2xat73hlwcpwo2zy.onion
Landing page: https://apps.voxmedia.com/verge-tips/

The Washington Post
SecureDrop address: jcw5q6uyjioupxcc.onion
Landing page: https://www.washingtonpost.com/securedrop

Whistleblower Aid
SecureDrop address: uwd57qermcote3au.onion
Landing page: https://whistlebloweraid.org/contact/instructions/

Wired
SecureDrop address: k5ri3fdr232d36nb.onion
Landing page: https://www.wired.com/securedrop/

Wall Street Journal
SecureDrop address: z5duvjw7ztnuc6fg.onion
Landing page: https://www.wsj.com/tips

Down for maintenance

International Consortium of Investigative Journalists
SecureDrop address: dcdoialeklnkb6fg.onion
Landing page: https://www.icij.org/securedrop

ProPublica
SecureDrop address: pubdrop4dw6rk3aq.onion
Landing page: https://securedrop.propublica.org/

Extended downtime, but still publicly advertised (at least in search engines)

Vox Media
SecureDrop address: 2cq26ys7wjhryrzw.onion
Landing page: https://apps.voxmedia.com/vox-tips/

CPJ
SecureDrop address: 2x2hb5ykeu4qlxqe.onion
Landing page: https://cpj.org/emergency-response/how-to-get-help.php

The Oregonian
SecureDrop address: a5gvhrpulvq33b3q.onion
Landing page: https://projects.oregonlive.com/securedrop/

The Sun
SecureDrop address: nodd5fyasyj4jqgp.onion
Landing page: https://securedrop.news.co.uk/sun/

Quartz
SecureDrop address: 4v6p5ajkvs54hxow.onion
Landing page: https://qz.com/tips/

Peerlyst
SecureDrop address: z5hns3zhhne7z6bl.onion
Landing page: https://www.peerlyst.com/secure-drop


List of SecureDrop instances