xo.store

.store user

First seen 2026-05-11 · Last seen 2026-05-11 · ok HTTP/1.1 200 178 ms crawled 2026-05-11

CA · 23.227.38.65 · AS13335 Cloudflare, Inc.

Reputation 100/100

ecommerce

HTML metadata

Title: X O S T O R E X O S T O R E
Description: Shop exclusive music and merch from the Official XO Store. Vinyl, hoodies, CDs, tees, and more.
Language: en
Canonical: https://xo.store/

Open Graph

url: https://xo.store/
title: X O S T O R E X O S T O R E
site name: X O S T O R E
description: Shop exclusive music and merch from the Official XO Store. Vinyl, hoodies, CDs, tees, and more.

Technology

CDN: Cloudflare
CMS: Shopify

Analytics

Google Tag Manager

Fonts

Adobe Fonts

Third-party hosts loaded (5)

use.typekit.net×3
shop.app×2
monorail-edge.shopifysvc.com×1
vice-prod.sdiapi.com×1
www.googletagmanager.com×1

Social

Contact

Phone

866-682-4413

DNS records live

NS

ns-1438.awsdns-51.org
ns-1541.awsdns-00.co.uk
ns-351.awsdns-43.com
ns-815.awsdns-37.net

TXT

_h2zlae4nh3xupw4xhbtqck29e9rri5a

Email authentication no MX

SPF: not published
DMARC: v=DMARC1; p=Reject; pct=100; rua=mailto:lcdtinfu@ag.us.dmarcian.com; ruf=mailto:lcdtinfu@fr.us.dmarcian.com; fo=1
policy: reject (enforced)
DKIM: no key found at common selectors

Certificate (current)

E8

from 2026-04-16 to 2026-07-15

Expires in 57 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 70/100 Checked live page: https://xo.store/

present

strict-transport-security
content-security-policy
x-content-type-options

findings

short HSTS max-age
CSP uses wildcard sources
missing frame protection
missing Referrer Policy
missing Permissions Policy

Header values

x-content-type-options: nosniff
content-security-policy: block-all-mixed-content; frame-ancestors *; upgrade-insecure-requests;
strict-transport-security: max-age=7889238

Links to (14)