THUGS(red) DarkWeb/Monitor_

xleet

Alive Dark Web Market Tor v3

capture
Blocked: a challenge page was served instead of the siteCHALLENGE PAGE

The only capture we hold is a challenge page, not the service. It is kept for evidence but is not shown here as if it were the site. View the raw capture.

what the page says

xLeet

xLeet Shop Tools, Xleet, Xleet.pw, Shells, Xleet.Is, Xleet.cc store,Xleet Cheap RDP, Xleet RDPs, SSH, Xleet cPanel,Xleet Mailer,Xleet SMTPs,xleet Webmail Shop

xLeet Welcome Back ! We β€˜re so excited to see you again ! Email Password Login Forgot password? - Need an account? Register
reachability history
The 60 most recent checks.
When Status HTTP Response Bytes Via
1h ago Alive 200 780 ms 6,377 chrome-stealth
3h ago Alive 200 867 ms 6,377 chrome-stealth
5h ago Alive 200 783 ms 6,377 chrome-stealth
7h ago Alive 200 762 ms 6,377 chrome-stealth
9h ago Alive 200 425 ms 6,377 chrome-stealth
12h ago Alive 200 652 ms 6,377 chrome-stealth
14h ago Alive 200 661 ms 6,377 chrome-stealth
16h ago Alive 200 418 ms 6,377 chrome-stealth
18h ago Alive 200 507 ms 6,377 chrome-stealth
20h ago Alive 200 511 ms 6,377 chrome-stealth
22h ago Alive 200 824 ms 6,377 chrome-stealth
1d ago Alive 200 667 ms 6,377 chrome-stealth
1d ago Alive 200 823 ms 6,377 chrome-stealth
1d ago Alive 200 650 ms 6,377 chrome-stealth
1d ago Alive 200 516 ms 6,377 chrome-stealth
1d ago Alive 200 558 ms 6,377 chrome-stealth
1d ago Alive 200 723 ms 6,377 chrome-stealth
1d ago Alive 200 404 ms 6,377 chrome-stealth
1d ago Alive 200 534 ms 6,377 chrome-stealth
1d ago Alive 200 4,048 ms 6,377 chrome-stealth
2d ago Alive 200 402 ms 6,377 chrome-stealth
2d ago Alive 200 1,473 ms 6,377 chrome-stealth
2d ago Alive 200 680 ms 6,377 chrome-stealth
2d ago Dead-Connection-Timeout - 60,000 ms 0 curl
2d ago Alive 200 666 ms 6,377 chrome-stealth
2d ago Alive 200 702 ms 6,377 chrome-stealth
2d ago Alive 200 843 ms 6,377 chrome-stealth
2d ago Alive 200 568 ms 6,377 chrome-stealth
2d ago Alive 200 717 ms 6,377 chrome-stealth
2d ago Alive 200 797 ms 6,377 chrome-stealth
3d ago Alive 200 530 ms 6,377 chrome-stealth
3d ago Alive 200 1,280 ms 6,377 chrome-stealth
3d ago Alive 200 1,037 ms 6,377 chrome-stealth
3d ago Alive 200 607 ms 6,377 chrome-stealth
3d ago Alive 200 1,601 ms 6,377 chrome-stealth
3d ago Alive 200 744 ms 6,377 chrome-stealth
3d ago Alive 200 1,365 ms 6,377 chrome-stealth
3d ago Alive 200 390 ms 6,377 chrome-stealth
3d ago Alive 200 816 ms 6,377 chrome-stealth
3d ago Alive 200 705 ms 6,377 chrome-stealth
3d ago Alive 200 559 ms 6,377 chrome-stealth
4d ago Alive 200 440 ms 6,377 chrome-stealth
4d ago Alive 200 284 ms 6,377 chrome-stealth
4d ago Alive 200 374 ms 6,377 chrome-stealth
4d ago Alive 200 316 ms 6,377 chrome-stealth
4d ago Alive 200 707 ms 6,377 chrome-stealth
4d ago Alive 200 568 ms 6,377 chrome-stealth
4d ago Alive 200 643 ms 6,377 chrome-stealth
4d ago Alive 200 268 ms 6,377 chrome-stealth
4d ago Alive 200 478 ms 6,377 chrome-stealth
4d ago Alive 200 675 ms 6,377 chrome-stealth
4d ago Alive 200 301 ms 6,377 chrome-stealth
5d ago Alive 200 618 ms 6,377 chrome-stealth
5d ago Alive 200 423 ms 6,377 chrome-stealth
5d ago Alive 200 736 ms 6,377 chrome-stealth
5d ago Alive 200 639 ms 6,377 chrome-stealth
5d ago Alive 200 271 ms 6,377 chrome-stealth
5d ago Alive 200 810 ms 6,377 chrome-stealth
5d ago Alive 200 653 ms 6,377 chrome-stealth
5d ago Alive 200 1,019 ms 6,377 chrome-stealth
security headers
Csp
Raw
default-src 'self' http: https: data: blob: 'unsafe-inline'; frame-ancestors 'self';
Directives
Default src
'self'http:https:data:blob:'unsafe-inline'
Frame ancestors
'self'
Unsafe inline
yes
Unsafe eval
no
Hsts
Max age
31536000
Include subdomains
yes
Preload
no
X content type options
nosniff
Referrer policy
no-referrer-when-downgrade
Cross origin
X xss protection
1; mode=block
Cookies
Count
0
Secure
0
Httponly
0
Samesite
0
Score
57
Missing
x_frame_optionspermissions_policycoopcoepcorp
technology detected
Server
Raw
nginx
Name
nginx
Family
nginx
Js
  • Name
    jQuery
    Version
    3.3.1
  • Name
    Bootstrap
    Version
    4.1.3
  • Name
    Turnstile
  • Name
    Font Awesome
Protocol
http/1.1
what blocks us
Detected
yes
Kind
cloudflare-turnstile
Vendor
Cloudflare
Label
Cloudflare Turnstile
Confidence
100
Signals
Turnstile widget origincf-turnstile widget containerwidget sitekey attributedocument body is almost empty (128 chars)
Self clearing
yes
Cleared
no
Waited ms
21078
Http code
200
Via
chrome-stealth
contacts published
  • Total0
crypto addresses
  • Total0
forms on the page
Count
1
Kinds
Register
1
Has login
no
Has search
no
Has upload
no
Forms
  • Kind
    register
    Method
    post
    Action
    http://xleetg4krpki4irlaelwacpfhfxnhpizuipxc7f3aztu7265fqvinfad.onion/log-in
    Inputs
    4
    Types
    emailpasswordhiddensubmit
    Password
    yes
    File
    no
outbound onion links
  • onion_unique not tracked onion_unique
  • onion_total not tracked onion_total
  • clearnet_unique not tracked clearnet_unique
  • internal not tracked internal 2
  • external not tracked external
  • total not tracked total 2
  • truncated not tracked truncated
response headers
HeaderValue
cache-control no-cache, private
connection keep-alive
content-encoding gzip
content-security-policy default-src 'self' http: https: data: blob: 'unsafe-inline'; frame-ancestors 'self';
content-type text/html; charset=UTF-8
date Mon, 05 Oct 2026 21:34:26 GMT
referrer-policy no-referrer-when-downgrade
server nginx
strict-transport-security max-age=31536000; includeSubDomains
transfer-encoding chunked
vary Accept-Encoding
x-content-type-options nosniff
x-xss-protection 1; mode=block