xap.com

.com crawl dns

First seen 2026-04-22 · Last seen 2026-05-16 · ok HTTP/1.1 200 4260 ms crawled 2026-05-16

US · 70.35.19.77 · AS14265 TPx Communications

Reputation 100/100

Classifying

HTML metadata

Title: XAP - Your College & Career Readiness Solution
Language: en

Technology

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (4)

fonts.googleapis.com×2
cdnjs.cloudflare.com×1
fonts.gstatic.com×1
www.googletagmanager.com×1

Social

Contact

Email

Phone

+18004686927

Registration

Registrar

Network Solutions, LLC

Created

1994-01-13

Expires

2031-01-12 1698 days left

Updated

2025-11-13

Name servers

ns1.xap.com
ns2.xap.com

DNS records live

NS

ns1.xap.com
ns2.xap.com

MX

0 xap-com.mail.protection.outlook.com

TXT

Show 4 TXT records

MS=ms52015419
N6zF7CHG0H/bZBScGF356MKemJNK8/Y4Jd5IonLkU1Cm5/EpDxJ6n6865Y2gVCHsUvUSdnmszNxR6GjokGsDNg==
46B1B69B4C
MS=ms64798105

Email authentication strong

SPF

v=spf1 ip4:204.14.65.0/24 ip4:70.35.19.0/24 ip4:23.103.224.0/19 ip4:206.191.224.0/19 ip4:40.103.0.0/16 a mx include:spf.protection.outlook.com include:sendgrid.net include:zcsend.net include:one.zoho.com ~all

softfail (~all)

DMARC

v=DMARC1; p=quarantine; pct=100;

policy: quarantine

DKIM

default: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCcfU5Q8e8wGLyrYIw6m3WdV5entiMOvxEeXPWCXKHtOJ8IBb5e2WaTVf6rqtVXzG57Fey5FJwQKvq/x45fI+…
selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXcuMbYpfh81g7/LVK6ubQ8cgez1liHzezFx4uspXvP4U5z+R+qbLKYymuDszcBLOW9NR36iajzgNi…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…

selectors probed

Certificate (current)

Sectigo Public Server Authentication CA DV R36

from 2026-02-01 to 2027-03-05

Expires in 289 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://xap.com/

present

content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

missing HSTS

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: geolocation=(self "https://FAKE URL.com")
x-content-type-options: nosniff
content-security-policy: frame-ancestors 'self'