StatsMyWeb
Main menu

Domain report

xor.tech

xor.tech ranks in the top 0.15% of domains by connectivity (Common Crawl, cc-main-2026-jul-aug-sep), with 2 distinct hosts observed under it.

Explore xor.tech in the Web Graph

Connectivity

#204,376harmonic-centrality rank
Top percentile
0.15%
Hosts observed
2

From the Common Crawl cc-main-2026-jul-aug-sep hyperlink graph, 133,241,980 domains total. What this rank means

HTTPS reachability

200HTTP status

https://xor.tech/ answered with HTTP 200.

DNS records

A
  • 216.198.79.1
AAAA
No records found.
MX
  • 1 smtp.google.com.
NS
  • miki.ns.cloudflare.com.
  • sam.ns.cloudflare.com.

Live preview

Screenshot of xor.tech

This site sends "X-Frame-Options: DENY", which blocks embedding it here.

Since xor.tech can't be embedded live, this is a captured screenshot instead — a snapshot from whenever it was last rendered, not necessarily this exact moment.

Domain registration (WHOIS / RDAP)

RDAP lookup failed (HTTP 429).

How to read WHOIS and RDAP data

SSL certificate

Certificate Transparency lookup failed (HTTP 429).

How to check when a certificate expires

HTTP & security headers

Response

Server
cloudflare
Content-Type
text/html; charset=utf-8
Cache-Control
public, max-age=0, must-revalidate
Content-Encoding
Not sent

Security

Content-Security-Policy
default-src 'self'; script-src 'self' 'unsafe-inline' https://eu.i.posthog.com https://eu-assets.i.posthog.com https://us.i.posthog.com https://us-assets.i.posthog.com https://www.googletagmanager.com https://www.google-analytics.com https://plausible.io https://*.clarity.ms; connect-src 'self' https://eu.i.posthog.com https://eu-assets.i.posthog.com https://us.i.posthog.com https://us-assets.i.posthog.com https://google-analytics.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://www.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://plausible.io https://*.clarity.ms; img-src 'self' data: https:; style-src 'self' 'unsafe-inline'; font-src 'self' data: https:; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; upgrade-insecure-requests
Strict-Transport-Security
max-age=63072000; includeSubDomains; preload
X-Frame-Options
DENY
X-Content-Type-Options
nosniff
Referrer-Policy
strict-origin-when-cross-origin
Permissions-Policy
camera=(), microphone=(), geolocation=()

What each security header does

Redirect chain

  1. 1.http://xor.tech/HTTP 308

    → https://xor.tech/

  2. 2.https://xor.tech/HTTP 307

    → https://www.xor.tech/

  3. 3.https://www.xor.tech/HTTP 200

Meta tags

Title
XOR | Cyber AI Evals
Description
XOR is a security lab that evaluates and improves the cyber capabilities of coding systems.
Canonical
https://www.xor.tech
Robots
index, follow
Generator
Not set
Open Graph title
XOR | Cyber AI Evals
Open Graph description
XOR is a security lab that evaluates and improves the cyber capabilities of coding systems.
Open Graph image
https://www.xor.tech/opengraph-image?v=20260924-card-3
Open Graph type
website
Twitter card
summary_large_image
Twitter title
XOR | Cyber AI Evals
Twitter image
https://www.xor.tech/opengraph-image?v=20260924-card-3

robots.txt

Disallow rules (User-agent: *)
4
Disallow rules (other agents)
13

Sitemap declared:

  • https://www.xor.tech/sitemap.xml

Technology detected

Best-effort, based on a small set of well-known signals — this may be incomplete.

  • Cloudflarecdn

    Server: cloudflare

  • Next.jsframework

    Found "_next/static/" in the page's HTML

Related domains

Similar connectivity

Domains ranked just above and below it in the same snapshot.