0xss[.]top

The domain 0xss.top is a generic phishing site designed to deceive users into disclosing sensitive information. It does not impersonate a specific brand or employ a known crypto drainer kit. As of the latest verification, 0xss.top has been taken offline, though it previously posed an elevated risk of credential theft or other fraudulent activity.

Technical indicators confirm the domain's malicious intent. 0xss.top was flagged by 1 of 95 security vendors on VirusTotal, including SOCRadar, and appeared on 3 security blocklists (PhishDestroy, MetaMask, and SEAL). It was registered through 耐思尼克国际集团有限公司 on February 21, 2026, and resolved to the IP address 104.21.53.232, hosted by Cloudflare in the US. The SSL certificate was issued by Google Trust Services (WE1), and the site employed technologies such as HSTS, Cloudflare Browser Insights, and HTTP/3. The observed page title was '522: Connection timed out', consistent with its current offline status.

Users who may have interacted with 0xss.top should immediately change any exposed credentials, enable two-factor authentication (2FA) on affected accounts, and monitor for unauthorized transactions or identity fraud. If financial or crypto assets were involved, revoke any token approvals and consider transferring funds to a new wallet. Report the domain to relevant platforms, such as Google Safe Browsing, PhishTank, or local cybersecurity authorities, to aid in broader mitigation efforts.