xpassgf.com
Domain report: WHOIS, DNS, hosting, SSL and safety. Checked .
Online · 200Family DNS blockedSSL: 32 days left12 years old
55
xpassgf.com was registered on 4 Mar 2014 via HOSTINGER operations, UAB and the registry expiry is 4 Mar 2028. WHOIS data came from RDAP at https://rdap.verisign.com/com/v1/domain/xpassgf.com.
xpassgf.com publishes 2 nameservers. DNSSEC is not signed.
xpassgf.com has 2 IPv4 addresses (84.32.84.159, 88.222.222.121) and 2 IPv6 addresses (2a02:4780:84:1037:90a5:2480:5aba:24c7, 2a02:4780:84:27ff:db2e:b1cf:9856:1f2a). The geolocation database places 84.32.84.159 in Vilnius, Lithuania.
The TLS certificate from YE1 is valid and has 32 days left (TLS 1.3). The homepage answered HTTP 200.
Tech detection named Contact Form 7, Draftpress HFCM, HTTP/3, Hostinger, Hostinger CDN, MySQL, PHP, Slick, WordPress, jQuery and jQuery Migrate. The fingerprints ran on the homepage that was already downloaded.
Domain · RDAP/WHOIS
xpassgf.com was registered on 4 Mar 2014 via HOSTINGER operations, UAB. The registry returned 1 status value and 2 nameservers from https://rdap.verisign.com/com/v1/domain/xpassgf.com.
| Registered | since 4 Mar 2014 |
|---|---|
| Created | 4 March 2014 |
| Updated | 27 September 2026 |
| Expires | 4 March 2028 |
| Registrar | HOSTINGER operations, UAB |
| Status | client transfer prohibited |
| Nameservers | byte.dns-parking.com, pixel.dns-parking.com |
| DNSSEC | no |
| Source | https://rdap.verisign.com/com/v1/domain/xpassgf.com |
xpassgf.com carries the status "client transfer prohibited". The registrar has asked the registry to refuse a transfer to another registrar. The status is a lock on the domain object. It is not evidence about the content of the site.
Nameserver byte.dns-parking.com is published for xpassgf.com in the registration record from https://rdap.verisign.com/com/v1/domain/xpassgf.com.
Nameserver pixel.dns-parking.com is published for xpassgf.com in the registration record from https://rdap.verisign.com/com/v1/domain/xpassgf.com.
DNS
xpassgf.com has 4 address records, 0 mail exchangers and 2 nameservers, measured at 1.1.1.1:53.
| A | 84.32.84.159, 88.222.222.121 |
|---|---|
| AAAA | 2a02:4780:84:1037:90a5:2480:5aba:24c7, 2a02:4780:84:27ff:db2e:b1cf:9856:1f2a |
| NS | byte.dns-parking.com, pixel.dns-parking.com |
| MX | — |
| SPF | absent |
| DMARC | absent |
| CAA | — |
| Wildcard | off |
| DNSSEC | not signed |
| Resolver | 1.1.1.1:53 |
IPv4 address 84.32.84.159 answers for xpassgf.com at resolver 1.1.1.1:53.
IPv4 address 88.222.222.121 answers for xpassgf.com at resolver 1.1.1.1:53.
IPv6 address 2a02:4780:84:1037:90a5:2480:5aba:24c7 answers for xpassgf.com at resolver 1.1.1.1:53.
IPv6 address 2a02:4780:84:27ff:db2e:b1cf:9856:1f2a answers for xpassgf.com at resolver 1.1.1.1:53.
Hosting and geo
xpassgf.com is placed in Vilnius, Lithuania by the local geolocation database (db-ip).
| Address | 84.32.84.159 |
|---|---|
| Country | Lithuania |
| City | Vilnius |
| Source | db-ip |
SSL/TLS
The certificate for xpassgf.com is valid, with 32 days left and 2 subject alternative names. Source: tls:443.
| Issuer | YE1 |
|---|---|
| Subject | xpassgf.com |
| Valid from | 3 September 2026 |
| Valid until | 2 December 2026 |
| Days left | 32 |
| SAN count | 2 |
| Protocol | TLS 1.3 |
| Source | tls:443 |
Subject alternative names: www.xpassgf.com, xpassgf.com.
Tech stack
Tech detection checked the fetched homepage and named 11 products. Source: wappalyzergo.
- Contact Form 7 · WordPress plugins, Form builders
- Draftpress HFCM · WordPress plugins
- HTTP/3 · Miscellaneous
- Hostinger · Hosting
- Hostinger CDN · CDN
- MySQL · Databases
- PHP · Programming languages
- Slick · JavaScript libraries
- WordPress · CMS, Blogs
- jQuery · JavaScript libraries
- jQuery Migrate · JavaScript libraries
Contact Form 7 is filed under WordPress plugins, Form builders.
Draftpress HFCM is filed under WordPress plugins.
HTTP/3 is filed under Miscellaneous.
Hostinger is filed under Hosting.
Hostinger CDN is filed under CDN.
MySQL is filed under Databases.
PHP is filed under Programming languages.
Slick is filed under JavaScript libraries.
WordPress is filed under CMS, Blogs.
jQuery is filed under JavaScript libraries.
jQuery Migrate is filed under JavaScript libraries.
On-page checks
The homepage returned HTTP 200 in 462 ms. The target title is 25 characters and the page has 0 H1 headings.
| Status | 200 |
|---|---|
| TTFB | 462 ms |
| Title length | 25 yes |
| Quoted title | "Home - Free XXX Passwords" |
| Meta description | none no |
| H1 count | 0 |
| HSTS | no no |
| CSP | yes |
| X-Frame-Options | — |
| Robots meta | index, follow, max-snippet:-1, max-video-preview:-1, max-image-preview:large |
| Canonical | https://xpassgf.com/ |
| Language | en-US |
| Links | 35 |
| Images | 3 |
| Favicon | no |
The quoted title and meta description are measurements of the other site. They are not this page's title or description.
Security
Family DNS for xpassgf.com is blocked, and URLhaus is clear. Source: family DNS and local lists.
| Family DNS | blocked |
|---|---|
| URLhaus | clear |
| UT1 | — |
| Web Risk | not run |
| Source | family DNS and local lists |
| HSTS | no |
| CSP | yes |
Cloudflare family DNS returned a block for xpassgf.com. That resolver covers adult and malware names.
Google Web Risk did not run. No API key is configured, and this report does not invent a clean result from that service.
Score breakdown
Availability 25 of 25. DNS answer plus a homepage status in the 2xx or 3xx range.
TLS 20 of 20. A valid certificate, with extra points when it has at least 14 days left.
DNS hygiene 0 of 20. SPF, DMARC, CAA, and DNSSEC are five points each.
Security headers 5 of 15. HSTS, CSP, and X-Frame-Options or CSP frame-ancestors.
Safety lists 0 of 15. Points only when the checks ran and came back clean. Unknown is not clean.
Domain age 5 of 5. Five points at one year, two points at 30 days.
Change history
- October 2026: dns a changed from 84.32.84.120,88.222.222.105 to 84.32.84.159,88.222.222.121.
- October 2026: dns aaaa changed from 2a02:4780:84:ec06:4dce:6894:369f:de8a,2a02:4780:84:ee62:3438:8e34:9ccf:c506 to 2a02:4780:84:1037:90a5:2480:5aba:24c7,2a02:4780:84:27ff:db2e:b1cf:9856:1f2a.
- October 2026: geo city changed from empty to Vilnius.
- October 2026: geo country changed from empty to Lithuania.
Questions
Is xpassgf.com safe?
Cloudflare family DNS returned a block for xpassgf.com. That resolver covers adult and malware names.
Who hosts xpassgf.com?
xpassgf.com is placed in Vilnius, Lithuania.
When does xpassgf.com expire?
xpassgf.com expires on 4 March 2028 according to https://rdap.verisign.com/com/v1/domain/xpassgf.com.
Who owns xpassgf.com?
The registry did not return a person or a company for xpassgf.com. RDAP often redacts the registrant. The registrar on file is HOSTINGER operations, UAB.
Sources
- RDAP source https://rdap.verisign.com/com/v1/domain/xpassgf.com at 2026-10-30T14:20:51Z
- DNS source 1.1.1.1:53 at 2026-10-30T14:20:51Z
- TLS source tls:443 at 2026-10-30T14:20:51Z
- HTTP source https://xpassgf.com/ at 2026-10-30T14:20:51Z
- Tech source wappalyzergo at 2026-10-30T14:20:51Z
- Geo source db-ip at 2026-10-30T14:20:51Z
- Safety source family DNS and local lists at 2026-10-30T14:20:51Z
Related reports
No other indexable reports share this TLD, host, or registrar yet.
Owner of this site?
Ask for a correction or for the report to be removed from search. Public DNS facts stay on the page. An optional badge is not inserted for you.
How to read this report
The sentences under each heading are filled from the latest snapshot. If a collector had nothing to say, that sentence is left out. The target site's own title and meta description, when shown, are quoted as measurements. They are not this page's title. Change history only lists a difference between two snapshots, so the first check starts the clock and later edits are the history. A malware blocklist is the only reason the homepage body is skipped. That fact stays on the report. It does not by itself drop the page from the sitemap or from related-report links.