xbts.io

.io crawl

First seen 2026-04-22 · Last seen 2026-05-16 · ok HTTP/1.1 200 6426 ms crawled 2026-05-16

US · 104.21.33.59 · AS13335 Cloudflare, Inc.

Reputation 87/100 weak security headers no dmarc policy

Classifying

HTML metadata

Title: XBTS DEX Exchange
Description: Buy, Sell, Exchange cryptocurrency in over 20,000 trading pairs
Language: en

Technology

CDN: Cloudflare
CMS: Nuxt

Fonts

Google Fonts

Third-party hosts loaded (3)

cdnjs.cloudflare.com×1
fonts.googleapis.com×1
user-images.githubusercontent.com×1

Social

DNS records live

NS

paul.ns.cloudflare.com
sue.ns.cloudflare.com

MX

10 mx1.privateemail.com
10 mx2.privateemail.com

TXT

google-site-verification=vhmEbYU8qLU-2LnT0GrE7nEPBjIwuXibBb4qp8janjo
google-site-verification=mDodzAO08NxY7GyqMx6FX4uU5uCKFXNJA0bi4o8E118

Email authentication weak

SPF

v=spf1 include:spf.privateemail.com ~all

softfail (~all)

DMARC

not published

DKIM

default: v=DKIM1;k=rsa;p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzv/leJ0w78VRo3OgYX3yHPedKwcSMXWhvsalt/OYaz+9UNLeRPJYP8rweFKhDxnGhC6o3cHNETa7ZgXB…

selectors probed

Certificate (current)

WE1

from 2026-05-05 to 2026-08-04

Expires in 76 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://xbts.io/

findings

missing HSTS
missing Content Security Policy
missing frame protection
missing content type protection
missing Referrer Policy
missing Permissions Policy