xss.is

Domain

Threat entity extracted from intelligence sources

Frequency

5

occurrences

First Seen

May 22, 2026

Last Seen

August 6, 2026

IOC Validation

ThreatCluster AI

False Positive — False Positive confidence

Mentioned as a forum, not attacker-controlled infrastructure

This indicator was flagged as a false positive by AI analysis.

Pivot to external tools

Opens in new tab · no data sent to TC

Reputation · 2

Sandbox · 2

Infrastructure · 5

Malware trackers · 2

Web search · 2

Related Clusters (3)

Operation Saffron: First VPN Dismantled in Major Cybercrime Takedown

May 21·32 sources

Canadian Hacker Pleads Guilty in Massive Snowflake Data Breach and Extortion Case

Aug 5·20 sources

Takedown of XSS.is Forum Disrupts Ransomware Supply Chain

Jun 30·3 sources

Related Articles (5)

Snowflake extortionist admits 165-victim cloud crime spree

Theregister·Aug 6

Canadian Man Pleads Guilty to Hacking U.S. Cloud Storage Provider and Extorting Its ...

XSS.is, The Forum That Ran the Ransomware Supply Chain Is Down. The Market Isn’t

Securityaffairs.Co·Jun 30

The Fall of XSS Forum: From DaMaGeLaB to the 2025 takedown

Databreaches·Jun 30

European Agencies Shutter VPN Service Used for Ransomware Attacks

Thecyberexpress·May 22

Related Entities

DaMaGeLaB Data Breach Ransomware DDoS Operation Riptide Operation Saffron Ticketmaster AT&T Santander Snowflake Ukraine Canada