llos.xyz

.xyz crawl

First seen 2026-04-15 · Last seen 2026-05-13 · ok HTTP/1.1 200 1060 ms crawled 2026-05-09

US · 188.114.97.3 · AS13335 Cloudflare, Inc.

Reputation 95/100 weak security headers

Classifying

HTML metadata

Title: LLOS — Design-focused website development
Description: LLOS& is a website development studio founded by Andreu Llos and based in Barcelona. We specialize in front-end, animations & interaction.
Language: en
Canonical: https://llos.xyz/

Open Graph

title: LLOS — Design-focused website development
description: LLOS& is a website development studio founded by Andreu Llos and based in Barcelona. We specialize in front-end, animations & interaction.

Technology

CDN: Cloudflare
CMS: Nuxt

Analytics

Cloudflare Insights

Third-party hosts loaded (2)

storage.googleapis.com×14
static.cloudflareinsights.com×1

Registration

Registrar

Cloudflare, Inc.

Created

2022-10-18

Expires

2026-10-18 151 days left

Updated

2025-02-03

Name servers

amir.ns.cloudflare.com
june.ns.cloudflare.com

DNS records live

NS

amir.ns.cloudflare.com
june.ns.cloudflare.com

MX

1 aspmx.l.google.com
10 aspmx2.googlemail.com
10 aspmx3.googlemail.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

Show 4 TXT records

SKamsvUXBtaTpR8SWtsg7kG-INr3P30KhsYKKPadup8
google-site-verification=-CyndM4qr21_6G6XC2ZZ8vGD-XLogfbxSKbK4oUkprA
google-site-verification=FtbZB9qGTW5_TDZJ3B_o4g06xk41l7ioW3ba8IyBCEI
google-site-verification=xmMordUZYqGpnAnYxCaZAEaFgvo3lsMNNlwy6Da9Cms

Email authentication strong

SPF

v=spf1 include:_spf.google.com ~all

softfail (~all)

DMARC

v=DMARC1; p=quarantine; pct=100

policy: quarantine

DKIM

google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QS6ruGpiWnOZ2QdMZpzwqBULAbIpwsz4bX9UYybplClhr8qQMdKYzT+AVYgiTRCmg0zDSjJCkhhQa…

selectors probed

Certificate (current)

WE1

from 2026-05-09 to 2026-08-07

Expires in 80 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 45/100 Checked live page: https://llos.xyz/

present

x-content-type-options
referrer-policy

findings

missing HSTS
missing Content Security Policy
missing frame protection
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff