Black Hat Chat
The only capture we hold is a challenge page, not the service. It is kept for evidence but is not shown here as if it were the site. View the raw capture.
Last 6 captures — hover to preview
Black Hat Chat
A chat community
Black Hat Chat Nickname: Password: Type the characters in the image: Guests, choose a colour: * Random Colour * Beige Blue violet Brown Cyan Sky blue Gold Grey Green Hot pink Light blue Light green Lime green Magenta Olive Orange Orange red Red Royal blue Sea green Sienna Silver Tan Teal Violet White Yellow Yellow green Currently 9 chatter(s) in room: ErotinX KashMoney Aaron asln rewr gorp tototo147 yes1 Sexywoman222 Welcome to Black Hat Chat. Try !rules or !help Rules No CP/spam/gore/other illegal activity Suggestions, comments and manual registration: blackh4t(at)firemail(dot)cc (encrypted…
| When | Status | HTTP | Response | Bytes | Via |
|---|---|---|---|---|---|
| 1h ago | Dead-Connection-Timeout | - | 60,001 ms | 0 | curl |
| 4h ago | Alive content moved | 200 | 326 ms | 31,648 | chrome-stealth |
| 6h ago | Alive content moved | 200 | 209 ms | 30,575 | chrome-stealth |
| 8h ago | Alive content moved | 200 | 705 ms | 31,051 | chrome-stealth |
| 10h ago | Alive content moved | 200 | 796 ms | 29,683 | chrome-stealth |
| 12h ago | Alive content moved | 200 | 548 ms | 32,297 | chrome-stealth |
| 14h ago | Alive content moved | 200 | 314 ms | 32,095 | chrome-stealth |
| 15h ago | Alive content moved | 200 | 288 ms | 29,339 | chrome-stealth |
| 17h ago | Dead-Connection-Timeout | - | 60,000 ms | 0 | curl |
| 21h ago | Alive content moved | 200 | 398 ms | 32,729 | chrome-stealth |
| 1d ago | Alive content moved | 200 | 372 ms | 33,136 | chrome-stealth |
| 1d ago | Alive content moved | 200 | 437 ms | 30,129 | chrome-stealth |
| 1d ago | Alive content moved | 200 | 435 ms | 32,109 | chrome-stealth |
| 1d ago | Alive content moved | 200 | 716 ms | 29,551 | chrome-stealth |
| 1d ago | Alive content moved | 200 | 991 ms | 30,783 | chrome-stealth |
| 1d ago | Alive content moved | 200 | 2,856 ms | 32,953 | chrome-stealth |
| 1d ago | Alive content moved | 200 | 1,489 ms | 31,196 | chrome-stealth |
| 1d ago | Alive content moved | 200 | 806 ms | 30,959 | chrome-stealth |
| 1d ago | Alive content moved | 200 | 548 ms | 30,216 | chrome-stealth |
| 1d ago | Alive content moved | 200 | 1,298 ms | 32,170 | chrome-stealth |
| 2d ago | Alive content moved | 200 | 393 ms | 30,038 | chrome-stealth |
| 2d ago | Alive content moved | 200 | 195 ms | 31,147 | chrome-stealth |
| 2d ago | Alive content moved | 200 | 242 ms | 31,518 | chrome-stealth |
| 2d ago | Alive content moved | 200 | 420 ms | 31,695 | chrome-stealth |
| 2d ago | Alive content moved | 200 | 430 ms | 31,131 | chrome-stealth |
| 2d ago | Alive content moved | 200 | 459 ms | 32,103 | chrome-stealth |
| 2d ago | Alive content moved | 200 | 933 ms | 31,201 | chrome-stealth |
| 2d ago | Dead-Connection-Timeout | - | 60,000 ms | 0 | curl |
| 2d ago | Dead-Connection-Timeout | - | 60,002 ms | 0 | curl |
| 3d ago | Alive content moved | 200 | 380 ms | 30,104 | chrome-stealth |
| 3d ago | Dead-Connection-Timeout | - | 60,001 ms | 0 | curl |
| 3d ago | Alive content moved | 200 | 428 ms | 29,467 | chrome-stealth |
| 3d ago | Dead-Connection-Timeout | - | 60,002 ms | 0 | curl |
| 3d ago | Alive content moved | 200 | 356 ms | 31,382 | chrome-stealth |
| 3d ago | Alive content moved | 200 | 169 ms | 32,747 | chrome-stealth |
| 3d ago | Alive content moved | 200 | 476 ms | 29,809 | chrome-stealth |
| 3d ago | Dead-Connection-Timeout | - | 60,001 ms | 0 | curl |
| 3d ago | Alive content moved | 200 | 500 ms | 30,725 | chrome-stealth |
| 4d ago | Alive content moved | 200 | 564 ms | 32,687 | chrome-stealth |
| 4d ago | Alive content moved | 200 | 335 ms | 29,756 | chrome-stealth |
| 4d ago | Alive content moved | 200 | 424 ms | 30,541 | chrome-stealth |
| 4d ago | Dead-Connection-Timeout | - | 60,000 ms | 0 | curl |
| 4d ago | Alive content moved | 200 | 594 ms | 31,441 | chrome-stealth |
| 4d ago | Alive content moved | 200 | 195 ms | 32,340 | chrome-stealth |
| 4d ago | Alive content moved | 200 | 496 ms | 30,870 | chrome-stealth |
| 4d ago | Alive content moved | 200 | 904 ms | 28,986 | chrome-stealth |
| 4d ago | Alive content moved | 200 | 435 ms | 31,492 | chrome-stealth |
| 4d ago | Alive content moved | 200 | 503 ms | 31,642 | chrome-stealth |
| 4d ago | Alive content moved | 200 | 453 ms | 30,836 | chrome-stealth |
| 5d ago | Alive content moved | 200 | 488 ms | 31,205 | chrome-stealth |
| 5d ago | Alive content moved | 200 | 340 ms | 31,900 | chrome-stealth |
| 5d ago | Alive content moved | 200 | 218 ms | 31,066 | chrome-stealth |
| 5d ago | Alive content moved | 200 | 499 ms | 28,267 | chrome-stealth |
| 5d ago | Alive content moved | 200 | 372 ms | 29,855 | chrome-stealth |
| 5d ago | Alive content moved | 200 | 435 ms | 32,206 | chrome-stealth |
| 5d ago | Alive content moved | 200 | 292 ms | 31,669 | chrome-stealth |
| 5d ago | Alive content moved | 200 | 402 ms | 29,592 | chrome-stealth |
| 5d ago | Alive content moved | 200 | 382 ms | 29,120 | chrome-stealth |
| 5d ago | Alive content moved | 200 | 545 ms | 29,729 | chrome-stealth |
| 5d ago | Alive content moved | 200 | 434 ms | 32,745 | chrome-stealth |
- Csp
- Raw
base-uri 'self'; default-src 'none'; font-src 'self'; form-action 'self'; frame-ancestors 'self'; frame-src 'self'; img-src * data:; media-src * data:; style-src 'self' 'unsafe-inline';- Directives
- Base uri
- 'self'
- Default src
- 'none'
- Font src
- 'self'
- Form action
- 'self'
- Frame ancestors
- 'self'
- Frame src
- 'self'
- Img src
- *data:
- Media src
- *data:
- Style src
- 'self''unsafe-inline'
- Unsafe inline
- yes
- Unsafe eval
- no
- X frame options
sameorigin, SAMEORIGIN- X content type options
nosniff, nosniff- Referrer policy
no-referrer, no-referrer-when-downgrade- Permissions policy
- Accelerometer
()- Ambient light sensor
()- Autoplay
()- Battery
()- Camera
()- Cross origin isolated
()- Display capture
()- Document domain
()- Encrypted media
()- Execution while not rendered
()- Execution while out of viewport
()- Fullscreen
()- Geolocation
()- Gyroscope
()- Magnetometer
()- Microphone
()- Midi
()- Navigation override
()- Payment
()- Picture in picture
()- Publickey credentials get
()- Screen wake lock
()- Sync xhr
()- Usb
()- Web share
()- Xr spatial tracking
()- Clipboard read
()- Clipboard write
()- Gamepad
()- Speaker selection
()- Conversion measurement
()- Focus without user activation
()- Hid
()- Idle detection
()- Sync script
()- Vertical scroll
()- Serial
()- Trust token redemption
()- Interest cohort
()- Otp credentials
()
- Cross origin
- Opener
same-origin- Embedder
require-corp- Resource
same-origin
- X xss protection
1; mode=block, 1; mode=block- Cookies
- Count
0- Secure
0- Httponly
0- Samesite
0
- Score
72- Missing
- hsts
- Server
- Raw
nginx- Name
nginx- Family
nginx
- Protocol
http/1.1
- Detected
- yes
- Kind
captcha- Vendor
Unknown- Label
Captcha- Confidence
75- Signals
- captcha form fieldcaptcha element
- Self clearing
- no
- Waited ms
0- Http code
200- Via
chrome-stealth
- Total
0
- Total
0
- Count
1- Kinds
- Login
1
- Has login
- yes
- Has search
- no
- Has upload
- no
- Forms
- Kind
login- Method
post- Action
http://blkhatjxlrvc5aevqzz5t6kxldayog6jlx5h7glnu44euzongl4fh5ad.onion/index.php- Inputs
9- Types
- hiddentextpasswordsubmit
- Password
- yes
- File
- no
-
onion_unique
not tracked
onion_unique -
onion_total
not tracked
onion_total -
clearnet_unique
not tracked
clearnet_unique1 -
internal
not tracked
internal23 -
external
not tracked
external1 -
total
not tracked
total24 -
truncated
not tracked
truncated
| Header | Value |
|---|---|
cache-control |
no-cache, no-store, must-revalidate, max-age=0, private |
connection |
keep-alive |
content-encoding |
gzip |
content-security-policy |
base-uri 'self'; default-src 'none'; font-src 'self'; form-action 'self'; frame-ancestors 'self'; frame-src 'self'; img-src * data:; media-src * data:; style-src 'self' 'unsafe-inline'; |
content-type |
text/html; charset=UTF-8 |
cross-origin-embedder-policy |
require-corp |
cross-origin-opener-policy |
same-origin |
cross-origin-resource-policy |
same-origin |
date |
Wed, 14 Oct 2026 03:10:05 GMT |
expires |
0 |
permissions-policy |
accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), cross-origin-isolated=(), display-capture=(), document-domain=(), encrypted-media=(), execution-while-not-rendered=(), execution-while-out-of-viewport=(), fullscreen=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), navigation-override=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(), usb=(), web-share=(), xr-spatial-tracking=(), clipboard-read=(), clipboard-write=(), gamepad=(), speaker-selection=(), conversion-measurement=(), focus-without-user-activation=(), hid=(), idle-detection=(), sync-script=(), vertical-scroll=(), serial=(), trust-token-redemption=(), interest-cohort=(), otp-credentials=() |
pragma |
no-cache |
referrer-policy |
no-referrer, no-referrer-when-downgrade |
server |
nginx |
transfer-encoding |
chunked |
x-content-type-options |
nosniff, nosniff |
x-frame-options |
sameorigin, SAMEORIGIN |
x-xss-protection |
1; mode=block, 1; mode=block |