xilo.net — domain check, WHOIS, DNS & reputation

HTML metadata

Title: xilo Ltd. : Sales 0800 905 5000 • Support 0333 773 3000
Description: xilo is a UK-based company, providing reliable and cost effective hosting solutions, from shared and reseller hosting, domain name registration, dedicated and virtual private services, SSL certificates and broadband.
Language: en

Technology

Server: Webserver

Contact

Phone

Registration

Registrar

Key-Systems GmbH

Created

2002-07-16

Expires

2029-07-16 1135 days left

Updated

2025-12-01

Name servers

ns.xilo.eu
ns.xilo.net
ns.xilo.uk
ns.xilo.us

DNS records live

NS

ns.xilo.eu
ns.xilo.net
ns.xilo.uk
ns.xilo.us

MX

0 in-1.xx.mailguard.xilo.net
0 in-2.xx.mailguard.xilo.net
0 in-3.xx.mailguard.xilo.net
0 in-4.xx.mailguard.xilo.net

Verified for

Apple
Google

Email authentication strong

SPF

v=spf1 include:policy.xilo.net include:spf.appmail.custserv.net exp=bounce.xilo.net -all

strict (-all)

DMARC

v=DMARC1; p=reject; rua=mailto:dmarc@xilo.net; ruf=mailto:dmarc@xilo.net; sp=reject; adkim=s; aspf=r; rf=afrf; pct=100; ri=60; fo=1;

policy: reject (enforced) · sp=reject

DKIM

mail: v=DKIM1;p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkB3AOWd1HWdi3bZ50eC1WVk61P1B2dNWOzbrlPJxqCaJShAzUGd9mn7ucxaZtKYVRnOXIDnkxruhjx6jTL7Bp…

selectors probed

Certificate (current)

R12

from 2026-05-14 to 2026-08-12

Expires in 66 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.xilo.net/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy
cross-origin-embedder-policy
cross-origin-resource-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), usb=(), interest-cohort=()
x-content-type-options: nosniff
content-security-policy: default-src 'none'; base-uri 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.xilo.net; object-src 'none'; style-src 'self' data: 'unsafe-inline' https://*.xilo.net; img-src 'self' blob: data: https://*.xilo.net; media-src 'self' data: https://*.xilo.net; frame-src *; font-src *; form-action 'self' https://*.xilo.net; connect-src 'self' https://*.xilo.net; manifest-src 'self' https://*.xilo.net; frame-ancestors 'self'; worker-src 'self' blob:; report-uri https://sentry.xilo.net/api/3/security/?sentry_key=558ec00c6ab34073c96015172684209a
strict-transport-security: max-age=63072000; includeSubdomains; preload
cross-origin-opener-policy: same-origin-allow-popups; report-uri="default"
cross-origin-embedder-policy: require-corp; report-uri="default"
cross-origin-resource-policy: same-site

Use this data via API

Everything on this page for xilo.net is available as JSON from the indexo.dev REST & MCP API.

curl "https://indexo.dev/api/v1/domains/xilo.net" \
  -H "X-API-Key: idx_..."

Read the docs & get a free key →