xsleaks.dev

xsleaks.dev is a live English-language website hosted on Fastly, Inc. (AS54113) in the United States, served by Github.com. cl0q first saw it on 2025-08-24 and last crawled it on 2026-07-04. It resolves to 185.199.109.153. Its favicon is fingerprinted by SHA-256, so you can find every other site that serves the same icon.

How the site describes itself:

Introduction | XS-Leaks Wiki

XS-Leaks Wiki # Overview # Cross-site leaks (aka XS-Leaks, XSLeaks) are a class of vulnerabilities derived from side-channels 1 built into the web platform. They take advantage of the web’s core principle of composability, which allows websites to interact with each other, and abuse legitimate mechanisms 2 to infer information about the user. One way of looking at XS-Leaks is to highlight their similarity with cross-site request forgery (CSRF 3) techniques, with the main difference being that instead of allowing other websites to perform actions on behalf of a user, XS-Leaks can be used to infer information about a user.