LINK VALIDATOR · SIGNED CANON

Torzon URL Validator

Paste a Torzon onion address and this validator tells you on the spot whether it matches the signed canon. The check runs inside your browser, sends nothing to any server, and refuses every near-match. Use it before you log in, every time.

CANON POINTERThe validator holds the same address list, but the canonical copy and the PGP block stay on the signed canon (index).torzonguqmlfy2kfi5tjbnt4bp3idtkjzi4qtupmhpdihjftomjtdzqd.onion
VERIFY METHODhow it decides

What the validator does with the string you paste

The tool is deliberately dumb in one useful way: it does not care what a page looks like, only whether the exact address is on the signed list. It gets there in three moves.

Pasteonion stringNormalizescheme, slash, caseMatchexact vs canon
1 · PasteYou drop in a full onion. Partial strings and fragments are rejected outright.
2 · NormalizeIt lowercases the string and strips the scheme, trailing slashes, and stray spaces.
3 · MatchThe cleaned value is compared to each canon entry. Anything short of a full match reads as unverified.
OUR METHODwhat we contribute

How our exact-match check works, in detail

Plenty of "check your link" pages just eyeball the text. This one runs a fixed procedure so the result does not depend on a hunch.

What it normalizes

Before any comparison, the input is lowercased and cleaned of the parts that carry no meaning for identity: the http or https prefix, trailing slashes, and whitespace. Two addresses that differ only in those cosmetic bits should not read as different, so they get flattened first.

What counts as a match

The cleaned value is then tested against every entry in the embedded canon list, character for character. There is no fuzzy scoring and no "looks close enough". A single wrong character fails, because on Tor a single wrong character is a different server.

Where PGP takes over

Matching the list proves the address is one we published. It does not prove the list itself is genuine on a page you do not trust. That last step is PGP: the mirror list ships with a signature, and you verify it against a fingerprint you already hold. The tool handles the string; the signature handles the source. Full walkthrough in the PGP guide.

TELL THEM APARTreal signals

Phishing clone vs signed canon: the tells that hold up

Layout and wording copy easily. These signals do not.

Phishing clone

  • Address is off by a character or two from the one you know.
  • No signature, or a signature that fails the check.
  • Pushes urgency: "old link dead, use this one now".
  • Asks for a deposit or fee on a clearnet page.
  • Reached you through an ad, a DM, or a search result.

Signed canon

  • Address matches the list character for character.
  • Signature verifies against a fingerprint you already had.
  • Handed out with a PGP block, not a countdown.
  • Only ever asks you to act inside Tor.
  • You fetched it yourself from a source you keep.
QUESTIONSplain answers

Validator questions

Does the validator send my link anywhere?

No. The address list is baked into the page and the comparison runs locally. Nothing about what you paste leaves your browser.

It says genuine format. Am I fully safe now?

Not on its own. A format pass means the string matches our list. Finish with the PGP signature check on the mirror list before you trust it.

Why reject an address that is almost right?

Because almost is exactly how clones work. Onion addresses have no near-misses; a changed character is a different key and a different server.

Where do I get a link to test?

Copy one from the mirror table on the canon, then paste it here to confirm the tool agrees.

RELATED

Before and after the check

New to the pieces, or ready to connect? Read what an onion link is, then follow how to access Torzon.

Read the access guide