xeggex.com

HTML metadata

Title: XeggeX Cryptocurrency Exchange
Description: XeggeX cryptocurrency exchange - Buy and sell cryptocurrencies like Bitcoin, Ethereum, and more on our secure and user-friendly platform. Start trading today.
Language: en
Canonical: https://xeggex.com/

Open Graph

url: https://xeggex.com
title: XeggeX cryptocurrency exchange - Buy and sell cryptocurrencies like Bitcoin, Ethereum, and more on our secure and user-friendly platform. Start trading today.
site name: XeggeX

Technology

CDN: Cloudflare

Third-party hosts loaded (1)

salesiq.zohopublic.com×1

Social

Registration

Registrar

Name.com, Inc.

Created

2021-08-31

Expires

2027-08-31 456 days left

Updated

2026-02-13

Name servers

jacqueline.ns.cloudflare.com
kenneth.ns.cloudflare.com

DNS records live

NS

jacqueline.ns.cloudflare.com
kenneth.ns.cloudflare.com

MX

10 mx1.titan.email
20 mx2.titan.email

TXT

v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC31FW5dpQABV0ZWbHVI4U95oIc3DtxX6BOiVFL5UetEtPWkqHytNBHpuRxzkHGgJYsOZ8z72Vsw967isv71SayovAew9U0HmEK46gMlc/RbJ+lPH4CfQwILTFb3tE4puxl35wjgzS0r4Wtcze9L7KFN6ERGqBK1bqY1QvSpwni1QIDAQAB

Verified for

Google

Email authentication partial

SPF: v=spf1 include:spf.titan.email ~all
softfail (~all)
DMARC: v=DMARC1;p=none;
policy: none (monitoring only)
DKIM: no key found at common selectors

Certificate (current)

WE1

from 2026-05-29 to 2026-08-27

Expires in 87 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://xeggex.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
cross-origin-opener-policy
cross-origin-resource-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: no-referrer
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.zohocdn.com/ https://*.zohopublic.com https://*.googletagmanager.com https://*.google-analytics.com https://*.twitter.com https://*.sumsub.com https://*.cloudflare.com https://xpense.network;script-src-attr 'self' 'unsafe-inline' 'unsafe-eval' https://*.zohocdn.com/ https://*.zohopublic.com https://*.googletagmanager.com https://*.sumsub.com https://*.cloudflare.com https://xpense.network;img-src 'self' data: blob: https://*.zohocdn.com/ https://*.zohopublic.com https://objects-eu.idanalyzer.com https://*.google-analytics.com https://*.googletagmanager.com https://*.twitter.com https://*.xeggex.com https://*.sumsub.com https://*.cloudflare.com https://xpense.network https://storage.googleapis.com;connect-src 'self' https://*.zohocdn.com/ https://*.zohopublic.com https://*.google-analytics.com https://*.sumsub.com wss://*.xeggex.com wss://xeggex.com https://*.xeggex.com https://*.cloudflare.com https://xpense.network;frame-src 's
strict-transport-security: max-age=31536000; includeSubdomains; preload
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin