xss.is

capture taken 16m ago

what the page says

Вход | XSS (ex DaMaGeLaB)

~/ XSS.MX ЛЕНТА ПОЛЬЗОВАТЕЛИ FAQ КИДАЛЫ ВХОД РЕГИСТРАЦИЯ ПОИСК Домен xss[.]ac разблокирован, но использоваться для форума больше не будет. Для того, чтобы всегда можно было найти актуальные домены форума был поднять link monitor на домене https://xss.today На данный момент основные домены форума следующие: https://xss[.]mx/ https://xssac4uqtauxumkktnp3knz2ag7qcb3efmb66mokjg5fcqhzvilgwfid[.]onion/ [ПРОКСИ] рези, моб, isp от $1.78; XSS35 -35% [DEP 1.4 BTC] Анонимная ЧИСТКА крипты BUY USA/CC+CVV fresh/used/old stuff TG:@godofdata BITCLEANER Миксер + Разрыв связей + Обмен Вход Вы должны быть…

reachability history

The 4 most recent checks.
When	Status	HTTP	Response	Bytes	Via
16m ago	Responding-403	403	1,670 ms	33,806	chrome-stealth
1h ago	Responding-403 content moved	403	1,723 ms	33,810	chrome-stealth
2h ago	Responding-403	403	675 ms	33,798	chrome-stealth
4h ago	Responding-403	403	598 ms	33,809	chrome-stealth

security headers

X frame options

SAMEORIGIN

X content type options

nosniff

Cross origin

Cookies

Count: 0
Secure: 0
Httponly: 0
Samesite: 0

Score

25

Missing

csphstsreferrer_policypermissions_policycoopcoepcorp

tls certificate

Protocol: TLS 1.3
Cipher: AES_128_GCM
Key exchange group: X25519MLKEM768
Signature algorithm: 2052
Subject: xssac4uqtauxumkktnp3knz2ag7qcb3efmb66mokjg5fcqhzvilgwfid.onion
Issuer: HARICA DV TLS RSA
San: xssac4uqtauxumkktnp3knz2ag7qcb3efmb66mokjg5fcqhzvilgwfid.onion
San count: 1
Wildcard: no
Valid from: 2026-07-28 06:40:01
Valid to: 2027-02-12 06:40:00
Days remaining: 174
Self signed: no
Ct compliance: unknown
Ech: no

technology detected

Server

Raw: nginx
Name: nginx
Family: nginx

Powered by

PHP/8.1.34

Cms

Name: XenForo

Languages

Name
PHP
Version
8.1.34

Js

Name
jQuery
Version
3.5.1
Name
Swiper

what blocks us

Detected: no
Confidence: 0
Waited ms: 0
Http code: 403
Via: chrome-stealth

contacts published

Total0

crypto addresses

Total0

forms on the page

Count

3

Kinds

Other: 2
Login: 1

Has login

yes

Has search

Has upload

Forms

Kind
other
Method
post
Action
https://xssac4uqtauxumkktnp3knz2ag7qcb3efmb66mokjg5fcqhzvilgwfid.onion/search/search
Inputs
5
Types
textcheckboxsubmithidden
Password
no
File
no
Kind
login
Method
post
Action
https://xssac4uqtauxumkktnp3knz2ag7qcb3efmb66mokjg5fcqhzvilgwfid.onion/login/login
Inputs
7
Types
hiddentextpasswordcheckboxsubmit
Password
yes
File
no
Kind
other
Method
get
Action
https://xssac4uqtauxumkktnp3knz2ag7qcb3efmb66mokjg5fcqhzvilgwfid.onion/
Inputs
1
Types
text
Password
no
File
no

outbound onion links

onion_unique not tracked onion_unique
onion_total not tracked onion_total
clearnet_unique not tracked clearnet_unique 5
internal not tracked internal 23
external not tracked external 5
total not tracked total 35
truncated not tracked truncated

response headers

Header	Value
`access-control-allow-headers`	*
`access-control-allow-methods`	GET, POST, PUT, DELETE, OPTIONS
`access-control-allow-origin`	*
`access-control-max-age`	3600
`cache-control`	no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0, private, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0, private
`cdn-cache-control`	no-store, max-age=0, s-maxage=0, private, no-store, max-age=0, s-maxage=0, private
`cloudflare-cdn-cache-control`	no-store, max-age=0, s-maxage=0, private, no-store, max-age=0, s-maxage=0, private
`content-encoding`	gzip
`content-length`	11942
`content-type`	text/html; charset=utf-8
`date`	Fri, 21 Aug 2026 17:47:22 GMT
`edge-control`	no-store, no-store
`expires`	0
`last-modified`	Fri, 21 Aug 2026 17:47:22 GMT
`pragma`	no-cache, no-cache
`server`	nginx
`surrogate-control`	no-store, no-store
`vary`	Cookie, Authorization, Accept-Encoding
`x-content-type-options`	nosniff
`x-frame-options`	SAMEORIGIN
`x-litespeed-cache-control`	no-cache, no-store, no-cache, no-store
`x-powered-by`	PHP/8.1.34
`x-zee-botguard-cache-policy`	protected-html-no-store, protected-html-no-store