BALTILEAKS seeks to obtain and publish information of legitimate public value to the citizens of Baltimore, Maryland.
Documents or reports prepared by, within, or for government at taxpayer expense
Documents or reports prepared by private organizations, public companies, or non-profits which may affect the public interest Leads and tips which may lead to information which affects the public interest Datasets or collections of information which has value to the public
Unencrypted web upload form (using WordPress), but they do suggest that leakers make use of their published GPG Public Encryption Key
- General inquiries and submissions
- email address: email@example.com
Social Networking publicity
Blog / RSS
Financial Donation methods
Currently accepting submissions of whistleblower leaks ?
Leak Submission Encryption
Unencrypted web file upload form
Digital Certificate fingerprints published on their website:
Qualsys SSLLabs SSL Server Test rating:
PGP Public Encryption Key
PGP ID: 0x66FF613A
Type: DH/DSS 2048/1024
Cipher: AES 256 bit
PGP fingerprint: 45D5 68E1 5218 7F31 072B AF9F 6698 2EA2 66FF 613A
TOR Hidden Service
Hushmail Secure Form
Leak Submission Anonymity
TOR users blocked from access
3rd Party or persistent tracking cookies
CAPTCHA graphics generated from another website e.g. Google Re-Captcha
Mixed mode non-SSL graphics or style sheets
Embedded video clips etc. from another website e.g. YouTube
Flash file uploader class
Communications / Acknowledgement back to the whistleblower via the website
Acknowledgement of receipt of information
e.g. file upload success indicator - has the leak message or upload actually been received successfully ?
Leak analysis work flow status reporting
e.g. Has anyone actually looked at what the whistleblower has submitted ?
Private message box
e.g for 2 way communications back to the anonymous whistleblower, asking for clarification, offering advice etc.
Domain Name Resilience
Domain Name Registrar
Enom Inc is in the Bellvue, Washington state, United State of America legal jurisdiction,
Multiple Internet Service Providers, in different legal jurisdictions ?
Domain Name Server(s) & jurisdiction(s)
dns1.name-services.com [22.214.171.124] dns2.name-services.com [126.96.36.199] dns3.name-services.com [188.8.131.52] dns4.name-services.com [184.108.40.206] dns5.name-services.com [220.127.116.11]
Web Server hosting jurisdiction(s)
baltileaks.org [18.104.22.168] is hosted in the United States of America, using Amazon's EC2 cloud
Alternate Domain Name aliases
Actual Physical Mirrors of the website:
Content available via BitTorrent etc P2P etc.