Publeaks

capture taken 11m ago

what the page says

Secure whistleblowing platform based on GlobaLeaks free and open-source software.

Error! This whistleblowing site is built with GlobaLeaks that is a software designed to fully support all commonly used browsers on desktop PCs, laptops, tablets, and smartphones. Unfortunately, this browser appears to lack some necessary capabilities. We recommend using the Tor Browser. We recommend using the Tor Browser for enhanced anonymity, as well as additional privacy and security features that are not available in other browsers. Here, you can find a list of other supported browsers.

reachability history

The 5 most recent checks.
When	Status	HTTP	Response	Bytes	Via
11m ago	Alive	200	170 ms	1,205	chrome-stealth
1h ago	Alive	200	791 ms	1,205	chrome-stealth
2h ago	Alive	200	1,723 ms	1,205	chrome-stealth
4h ago	Alive	200	223 ms	1,205	chrome-stealth
6h ago	Alive	200	336 ms	1,205	chrome-stealth

security headers

Csp

Raw

base-uri 'none';connect-src 'self';default-src 'none';font-src 'self';form-action 'none';frame-ancestors 'none';frame-src 'self';img-src 'self';media-src 'self';script-src 'self';style-src 'self' 'nonce-wphtJRmdF3oDdrWXY0DUiA==';trusted-types angular angular#bundler dompurify default;require-trusted-types-for 'script';report-to csp-endpoint

Directives

Base uri: 'none'
Connect src: 'self'
Default src: 'none'
Font src: 'self'
Form action: 'none'
Frame ancestors: 'none'
Frame src: 'self'
Img src: 'self'
Media src: 'self'
Script src: 'self'
Style src: 'self''nonce-wphtJRmdF3oDdrWXY0DUiA=='
Trusted types: angularangular#bundlerdompurifydefault
Require trusted types for: 'script'
Report to: csp-endpoint

Unsafe inline

Unsafe eval

X frame options

deny

X content type options

nosniff

Referrer policy

no-referrer

Permissions policy

Accelerometer: ()
Ambient light sensor: ()
Bluetooth: ()
Camera: ()
Clipboard read: ()
Clipboard write: (self)
Document domain: ()
Display capture: ()
Fullscreen: ()
Geolocation: ()
Gyroscope: ()
Idle detection: (self)
Keyboard map: ()
Local fonts: ()
Magnetometer: ()
Microphone: ()
Midi: ()
Notifications: ()
Payment: ()
Push: ()
Screen wake lock: ()
Serial: ()
Speaker selection: ()
Usb: ()
Web share: ()
Xr spatial tracking: ()

Cross origin

Opener: same-origin
Embedder: require-corp
Resource: same-origin

Cookies

Count: 0
Secure: 0
Httponly: 0
Samesite: 0

Score

80

Missing

hsts

technology detected

Server

Raw: GlobaLeaks
Name: GlobaLeaks
Family: unknown

Frameworks

Name
Angular
Version
21.2.18

Protocol

http/1.1

what blocks us

Detected: no
Confidence: 0
Waited ms: 0
Http code: 200
Via: chrome-stealth

contacts published

Total0

crypto addresses

Total0

forms on the page

Count: 0
Has login: no
Has search: no
Has upload: no

outbound onion links

onion_unique not tracked onion_unique
onion_total not tracked onion_total
clearnet_unique not tracked clearnet_unique 3
internal not tracked internal
external not tracked external 3
total not tracked total 3
truncated not tracked truncated

response headers

Header	Value
`cache-control`	no-store
`content-security-policy`	base-uri 'none';connect-src 'self';default-src 'none';font-src 'self';form-action 'none';frame-ancestors 'none';frame-src 'self';img-src 'self';media-src 'self';script-src 'self';style-src 'self' 'nonce-wphtJRmdF3oDdrWXY0DUiA==';trusted-types angular angular#bundler dompurify default;require-trusted-types-for 'script';report-to csp-endpoint
`content-type`	text/html
`cross-origin-embedder-policy`	require-corp
`cross-origin-opener-policy`	same-origin
`cross-origin-resource-policy`	same-origin
`date`	Fri, 21 Aug 2026 17:51:01 GMT
`origin-agent-cluster`	?1
`permissions-policy`	accelerometer=(),ambient-light-sensor=(),bluetooth=(),camera=(),clipboard-read=(),clipboard-write=(self),document-domain=(),display-capture=(),fullscreen=(),geolocation=(),gyroscope=(),idle-detection=(self),keyboard-map=(),local-fonts=(),magnetometer=(),microphone=(),midi=(),notifications=(),payment=(),push=(),screen-wake-lock=(),serial=(),speaker-selection=(),usb=(),web-share=(),xr-spatial-tracking=()
`referrer-policy`	no-referrer
`reporting-endpoints`	csp-endpoint="/api/report"
`server`	GlobaLeaks
`transfer-encoding`	chunked
`x-check-tor`	True
`x-content-type-options`	nosniff
`x-frame-options`	deny
`x-robots-tag`	noindex