Blacklist: image, onion and eepsite hashes

This search engine does not index child sexual abuse material. We do not want to be the only index that can tell it apart either, so we publish what we have confirmed: an md5 hash for every image we blacklisted, on the Tor and I2P sides together, and an md5 hash for every onion service and every eepsite that served one of them. Another search engine can use the same hashes to filter the same material out of its results.

This page in other languages: English · 日本語 · 繁體中文 · 简体中文 · Русский · Español · Español (México) · Português · Português (Brasil) · Deutsch · Italiano · Polski

What is in the lists

The lists come from our own moderation, not from a third party: an image is blacklisted when our review tools or a vetted, human-confirmed signature identify it as child sexual abuse material or as related illegal material, and every onion service and eepsite we found serving one of those images is recorded with it.

A hash is a one-way value. It identifies content, and it cannot be turned back into the content. We publish hashes and not images, an address is published only as a hash, and neither list can be used to find the material. They are made to recognise it and to leave it out.

The image hash

Each line of the image list is the md5 hash of the bytes of one image our moderation blacklisted, on either network, exactly as the md5sum utility computes it for the same file:

md5sum <file>

The onion hash

Each line of the onion list is the md5 hash of one onion hostname, taken over the lowercase address including its .onion suffix. This is the same recipe ahmia.fi publishes:

echo -n "abcdefghijklmnopqrstuvwxyz234567abcdefghijklmnopqrstuvab.onion" | md5sum

For the example address abcdefghijklmnopqrstuvwxyz234567abcdefghijklmnopqrstuvab.onion the result is d8604171b8f0441a72a574c3661d9d58.

The i2p eepsite hash

The I2P list follows the same rule for eepsites. Each line is the md5 hash of one I2P hostname, taken over the lowercase address including its suffix: a b32 address with its .b32.i2p ending, a named eepsite with its .i2p one:

echo -n "abcdefghijklmnopqrstuvwxyz234567abcdefghijklmnopqrst.b32.i2p" | md5sum

For the example address abcdefghijklmnopqrstuvwxyz234567abcdefghijklmnopqrst.b32.i2p the result is 4c5e146a233d1c32593e385bbd27c355.

The lists

All three lists are plain text: one 32-character lowercase md5 hash per line.