xono.online
No paid content found
Categories: Resources & Utilities
Xono combines secure whistleblowing software with employee engagement surveys to protect your team and business—no trade-offs between compliance and culture. Book a demo.
Visit website
Updated: 2026-09-28 07:12
Language: English (default)
Access: Normal
Profile views 0
Outbound visits 0
Related questions
More questions →What is xono.online?
Does xono.online offer paid content?
What languages does xono.online support?
How can I visit xono.online?
What are some alternatives to xono.online?
Website Overview
Identifiable technologies and additional version or configuration signals make the service easier to fingerprint, which may help targeted scanners narrow their checks. Several search or sharing settings need attention. Together they may make snippets, preview images or preferred URLs less consistent across platforms.
Domain and Registration
Transfer-protection status is present, helping reduce the risk of unauthorized domain transfers. The domain has about 5 years of registration history; its current configuration provides more context than age alone. The domain uses the common .online extension, which is not an independent safety signal.
DNS and Email
The observed email authentication setup is incomplete: SPF is missing. The lowest TTL is 0 seconds, supporting rapid record changes at the cost of more frequent lookups. Nameservers are provided by name-services.com, indicating managed DNS hosting. MX records point to the Google Workspace email service. No CNAME was found; the observed records resolve directly to addresses.
TLS and Certificates
The certificate uses an RSA 4096-bit public key, offering broad client compatibility. The server supplied a complete certificate chain. No organization name is present in the certificate; the available fields are consistent with domain validation. The certificate was issued by Let's Encrypt, commonly associated with automated certificate services. The certificate's total validity is about 89 days, consistent with a short renewal cycle.
HTTP and Browser Security
The Server header exposes the software version: nginx/1.31.3. This makes version-targeted checks easier, but is not proof of an exploitable vulnerability. No X-Powered-By header was found, reducing one common source of backend fingerprinting information. All six checked browser-security headers are present. Their effectiveness still depends on the policy values and application behavior. No obvious internal addresses or debug information were found in the headers. No explicit CDN or WAF marker was found in the response headers.
Technology Stack Analysis
The public page identifies Bootstrap, nginx 1.31.3, with exact versions exposed for 1 technologies. These details can narrow vulnerability checks, although exposure alone is not a vulnerability.
Search and Social Sharing
The meta description has 170 characters and may be shortened in search results. Open Graph is partially configured; og:type is missing. Twitter Card metadata is configured. JSON-LD includes Organization data, helping describe the organization as an entity. The title has 61 characters, within a common display range.
Hosting and Email
Hosting
Hetzner Online GmbH
Google Workspace
Location
Falkenstein, Saxony, Germany
Pages, Search and Sharing
| Meta description | Xono combines secure whistleblowing software with employee engagement surveys to protect your team and business—no trade-offs between compliance and culture. Book a demo. |
|---|---|
| Canonical URL | https://www.xono.online/ |
| Language | English (default) |
| Twitter Card | summary_large_image |
Social Sharing Preview
5 fieldsSharing metadata
| og:url | https://www.xono.online/ |
|---|---|
| og:image | https://www.xono.online/assets/img/anonymous-whistleblowing-dashboard.webp |
| og:title | Whistleblowing Platform with Employee Engagement Tools | Xono |
| og:description | Xono combines secure whistleblowing software with employee engagement surveys to protect your team and business. |
| twitter:card | summary_large_image |
robots.txt (opens in a new tab)
3 rulesAll bots 1 allowed · 2 disallowed
All bots
/
/admin//private/
No matching rules.
Sitemaps
1
Registration details RDAP / WHOIS
| Registrar | eNom, LLC |
|---|---|
| Registered | 2021-03-22 |
| Expires | 2027-03-22 |
| Domain status | client transfer prohibited |
| Nameservers | dns1.name-services.com、dns2.name-services.com、dns3.name-services.com、dns4.name-services.com、dns5.name-services.com |
| DNSSEC | unsigned |
DNS records
| Type | Name | Value | TTL | Priority |
|---|---|---|---|---|
| A | www.xono.online | 5.9.28.72 | 1800 | — |
| MX | xono.online | ASPMX.L.GOOGLE.COM | 1800 | 1 |
| MX | xono.online | ALT1.ASPMX.L.GOOGLE.COM | 1800 | 5 |
| MX | xono.online | ALT2.ASPMX.L.GOOGLE.COM | 1800 | 5 |
| MX | xono.online | ALT3.ASPMX.L.GOOGLE.COM | 1800 | 10 |
| MX | xono.online | ALT4.ASPMX.L.GOOGLE.COM | 1800 | 10 |
| NS | xono.online | dns1.name-services.com | 0 | — |
| NS | xono.online | dns2.name-services.com | 0 | — |
| NS | xono.online | dns3.name-services.com | 0 | — |
| NS | xono.online | dns4.name-services.com | 0 | — |
| NS | xono.online | dns5.name-services.com | 0 | — |
| TXT | xono.online | google-site-verification=DuPV6T3F2yNerm6aN19cQzm7IUoELl6WP4YcwC5FLh8 | 1800 | — |
| DMARC | _dmarc.xono.online | v=DMARC1; p=none; | 1800 | — |
TLS and certificates
| Assessment | Normal configuration |
|---|---|
| Supported protocols | TLSv1.2、TLSv1.3 |
| Negotiated protocol | TLSv1.3 |
| Certificate subject | www.xono.online |
| Issuer | Let's Encrypt |
| Valid until | 2026-11-19T21:18 · Remaining when checked: 52 days |
| Verification details | Certificate trust: Passed · Hostname match: Passed |
HTTP response headers
| Header | Value |
|---|---|
| content-type | text/html |
| server | nginx/1.31.3 |
| strict-transport-security | max-age=31536000; includeSubDomains; preload, max-age=31536000 |
| content-security-policy | default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self' https://online.us1.list-manage.com; script-src 'self' https://analytics.xono.online https://widget.trustpilot.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https://*.trustpilot.com https://*.trustpilot.net; font-src 'self'; connect-src 'self' https://analytics.xono.online https://*.trustpilot.com; frame-src https://www.youtube-nocookie.com https://widget.trustpilot.com; upgrade-insecure-requests |
| x-frame-options | DENY |
| x-content-type-options | nosniff |
| referrer-policy | strict-origin-when-cross-origin |
| permissions-policy | geolocation=(), camera=(), microphone=(), payment=(), usb=(), interest-cohort=() |
Identified technologies
User reviews (0)