xpmetric.com
Paid content
Categories: Data & Analytics
Web analytics that plays like an RPG. Track visitors, revenue, and conversions. Earn XP, level up your founder, unlock achievements, and share milestone cards.
Related questions
More questions →What is xpmetric.com?
Does xpmetric.com offer paid content?
What languages does xpmetric.com support?
How can I visit xpmetric.com?
What are some alternatives to xpmetric.com?
Website Overview
The available information shows a mix of normal operation and configuration gaps. Depending on how the website is used, these gaps may affect secure access or the consistency of its public presentation.
Domain and Registration
The domain was registered less than a year ago and has limited historical evidence to assess. Transfer-protection status is present, helping reduce the risk of unauthorized domain transfers. The registrar is Cloudflare, Inc., a widely used domain service provider. The domain uses the common .com extension, which is not an independent safety signal.
DNS and Email
Nameservers are provided by Cloudflare, indicating managed DNS hosting. MX records point to the Cloudflare Email Routing email service. No CNAME was found; the observed records resolve directly to addresses. SPF and DMARC are configured. DKIM status is unknown. TXT records include verification markers for Google. Such markers may also remain after a service stops being used.
TLS and Certificates
The public key uses EC with 256 bits. The server supplied a complete certificate chain. No organization name is present in the certificate; the available fields are consistent with domain validation. The certificate was issued by Let's Encrypt, commonly associated with automated certificate services. The certificate's total validity is about 89 days, consistent with a short renewal cycle.
HTTP and Browser Security
No X-Powered-By header was found, reducing one common source of backend fingerprinting information. All six checked browser-security headers are present. Their effectiveness still depends on the policy values and application behavior. The cf-ray response header indicates a CDN or caching proxy in the delivery path. No obvious internal addresses or debug information were found in the headers. The Server header identifies cloudflare without an exact version.
Technology Stack Analysis
The public page identifies Next.js, Cloudflare without precise versions, leaving fewer clues for version-specific scanning.
Search and Social Sharing
No homepage canonical URL was detected. If duplicate URLs exist, consolidation may be less explicit. Twitter Card metadata is configured. JSON-LD includes Organization data, helping describe the organization as an entity. The title has 32 characters, within a common display range. A meta description is present, with 159 characters.
Hosting and Email
Pages, Search and Sharing
| Meta description | Web analytics that plays like an RPG. Track visitors, revenue, and conversions. Earn XP, level up your founder, unlock achievements, and share milestone cards. |
|---|---|
| Canonical URL | Not detected |
| Language | English (default) |
| Twitter Card | summary_large_image |
Social Sharing Preview
19 fieldsrobots.txt (opens in a new tab)
126 rulesAll bots 2 allowed · 4 disallowed
//api/og/achievement//api//dashboard//login/verify/welcome
gptbot 2 allowed · 4 disallowed
//api/og/achievement//api//dashboard//login/verify/welcome
oai-searchbot 2 allowed · 4 disallowed
//api/og/achievement//api//dashboard//login/verify/welcome
chatgpt-user 2 allowed · 4 disallowed
//api/og/achievement//api//dashboard//login/verify/welcome
claudebot 2 allowed · 4 disallowed
//api/og/achievement//api//dashboard//login/verify/welcome
claude-searchbot 2 allowed · 4 disallowed
//api/og/achievement//api//dashboard//login/verify/welcome
anthropic-ai 2 allowed · 4 disallowed
//api/og/achievement//api//dashboard//login/verify/welcome
perplexitybot 2 allowed · 4 disallowed
//api/og/achievement//api//dashboard//login/verify/welcome
perplexity-user 2 allowed · 4 disallowed
//api/og/achievement//api//dashboard//login/verify/welcome
google-extended 2 allowed · 4 disallowed
//api/og/achievement//api//dashboard//login/verify/welcome
googleother 2 allowed · 4 disallowed
//api/og/achievement//api//dashboard//login/verify/welcome
bingbot 2 allowed · 4 disallowed
//api/og/achievement//api//dashboard//login/verify/welcome
applebot 2 allowed · 4 disallowed
//api/og/achievement//api//dashboard//login/verify/welcome
applebot-extended 2 allowed · 4 disallowed
//api/og/achievement//api//dashboard//login/verify/welcome
ccbot 2 allowed · 4 disallowed
//api/og/achievement//api//dashboard//login/verify/welcome
meta-externalagent 2 allowed · 4 disallowed
//api/og/achievement//api//dashboard//login/verify/welcome
amazonbot 2 allowed · 4 disallowed
//api/og/achievement//api//dashboard//login/verify/welcome
duckassistbot 2 allowed · 4 disallowed
//api/og/achievement//api//dashboard//login/verify/welcome
mistralai-user 2 allowed · 4 disallowed
//api/og/achievement//api//dashboard//login/verify/welcome
cohere-ai 2 allowed · 4 disallowed
//api/og/achievement//api//dashboard//login/verify/welcome
youbot 2 allowed · 4 disallowed
//api/og/achievement//api//dashboard//login/verify/welcome
No matching rules.
Sitemaps
1
Registration details RDAP / WHOIS
| Registrar | Cloudflare, Inc. |
|---|---|
| Registered | 2026-03-04 |
| Expires | 2027-03-04 |
| Domain status | client transfer prohibited |
| Nameservers | samara.ns.cloudflare.com、syeef.ns.cloudflare.com |
| DNSSEC | unsigned |
DNS records
| Type | Name | Value | TTL | Priority |
|---|---|---|---|---|
| A | xpmetric.com | 104.21.84.160 | 300 | — |
| A | xpmetric.com | 172.67.195.56 | 300 | — |
| AAAA | xpmetric.com | 2606:4700:3032::ac43:c338 | 300 | — |
| AAAA | xpmetric.com | 2606:4700:3034::6815:54a0 | 300 | — |
| MX | xpmetric.com | route1.mx.cloudflare.net | 300 | 12 |
| MX | xpmetric.com | route3.mx.cloudflare.net | 300 | 22 |
| MX | xpmetric.com | route2.mx.cloudflare.net | 300 | 52 |
| NS | xpmetric.com | samara.ns.cloudflare.com | 86400 | — |
| NS | xpmetric.com | syeef.ns.cloudflare.com | 86400 | — |
| TXT | xpmetric.com | google-site-verification=if24dPEj4DLL5vaMp0UDJ1sKQodOAiFKPdvyFcQZx3w | 300 | — |
| TXT | xpmetric.com | v=spf1 include:_spf.mx.cloudflare.net ~all | 300 | — |
| DMARC | _dmarc.xpmetric.com | v=DMARC1; p=quarantine; rua=mailto:[email protected] | 300 | — |
TLS and certificates
| Assessment | Normal configuration |
|---|---|
| Supported protocols | TLSv1.3 |
| Negotiated protocol | TLSv1.3 |
| Certificate subject | xpmetric.com |
| Issuer | Let's Encrypt |
| Valid until | 2026-11-26T12:05 · Remaining when checked: 62 days |
| Verification details | Certificate trust: Passed · Hostname match: Passed |
HTTP response headers
| Header | Value |
|---|---|
| content-type | text/html; charset=utf-8 |
| cache-control | s-maxage=31536000 |
| server | cloudflare |
| strict-transport-security | max-age=31536000; includeSubDomains; preload |
| content-security-policy | default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://proofswap.me https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://www.google-analytics.com https://*.googleusercontent.com https://proofswap.me; connect-src 'self' https://*.google-analytics.com https://analytics.google.com https://proofswap.me https://challenges.cloudflare.com; frame-src https://challenges.cloudflare.com; font-src 'self'; frame-ancestors 'self' https://buildhop.io https://www.buildhop.io |
| x-content-type-options | nosniff |
| referrer-policy | strict-origin-when-cross-origin |
| permissions-policy | camera=(), microphone=(), geolocation=() |
User reviews (0)