aimarcus.eu

HTML metadata

Title

AI Marcus — Что мы создаём сегодня?

Description

Опишите сайт — AI соберёт его за 60 секунд. От лендинга до приложения с базой данных.

Language

ru

Canonical

https://aimarcus.eu/

Translations

ar
bg
cs
da
de
el
en
es
et
fi
fr
he
hi
hr
hu
id
it
ja
ko
lt
lv
ms
nl
no
pl
pt
ro
ru
sk
sl
sv
th
tr
uk
vi
zh

Open Graph

url: https://aimarcus.eu/
title: AI Marcus — Что мы создаём сегодня?
locale: ru_RU
site name: AI Marcus
description: Опишите сайт — AI соберёт его за 60 секунд. От лендинга до приложения с базой данных.

Technology

Server: nginx

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (4)

fonts.googleapis.com×3
fonts.gstatic.com×2
mc.yandex.ru×1
www.googletagmanager.com×1

DNS records live

NS

ns.zone.eu
ns2.zone.ee
ns3.zonedata.net

TXT

google-site-verification=GauggmJLkecSa6btb7jUKlFMPYJAcADiXfaqoPXK9dc
google-site-verification=tT8qFU-y4Z-JF2yY54zNrEll9glKey14jwtPVx3lPd4

Email authentication no MX

SPF

v=spf1 ip4:185.4.72.209 a mx -all

strict (-all)

DMARC

not published

DKIM

dkim: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDSabwysVmEhUNqAOV0zmFqLt3rBhR8nxrFPXBfF0pOwWpyyS/cTC4AFbujskVSGrLufJe84guSDrE4pBIlr8…

selectors probed

Certificate (current)

E7

from 2026-04-04 to 2026-07-03

Expires in 45 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://aimarcus.eu/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
cross-origin-opener-policy
cross-origin-resource-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
weak frame protection
weak content type protection
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin, strict-origin-when-cross-origin, strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN, SAMEORIGIN
x-content-type-options: nosniff, nosniff, nosniff
content-security-policy: default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://js.stripe.com https://unpkg.com https://www.googletagmanager.com https://www.google-analytics.com https://mc.yandex.ru https://mc.yandex.com https://yastatic.net https://connect.facebook.net;script-src-attr 'unsafe-inline';worker-src 'self' blob:;style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://fonts.googleapis.com https://unpkg.com;img-src 'self' data: blob: https: http: https://www.facebook.com;font-src 'self' https://fonts.gstatic.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com;connect-src 'self' https://api.anthropic.com https://api.openai.com https://openrouter.ai https://js.stripe.com https://*.supabase.co https://www.google-analytics.com https://*.google-analytics.com https://www.googletagmanager.com https://*.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdnjs.cloudflare
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin