@SolSoCoG Working now, ty! But correct me if I'm wrong. A hidden service (.onion) is exit-node-agnostic, isn't it? A malicious node can't mess with .onion connections, unlike Tor connections over clearnet - isn't that the whole point of a hidden service?
Besides, it's hard to abuse an onion address due to PoW, isn't it? Why do you have it if you block it (and not even sending the Onion-Location header)? Tor abusers have started giving you a hard time?