cannalytix.co
HTML metadata
DNS records live
- NS
-
- ns69.domaincontrol.com
- ns70.domaincontrol.com
- TXT
-
hosting-site=link-tracker-26f00
Certificate (current)
WR3
Expires in 56 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
SAMEORIGIN- permissions-policy
camera=(), microphone=(), geolocation=(), payment=(self)- x-content-type-options
nosniff- content-security-policy
default-src 'self'; script-src 'self' https://js.stripe.com https://www.googletagmanager.com https://apis.google.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https://*.googleapis.com https://*.googleusercontent.com; font-src 'self' https://fonts.gstatic.com; connect-src 'self' https://*.googleapis.com https://*.google-analytics.com https://*.firebaseio.com https://*.cloudfunctions.net https://*.a.run.app https://openrouter.ai https://api.stripe.com https://*.sentry.io https://*.ingest.sentry.io https://*.supabase.co wss://*.firebaseio.com; frame-src 'self' https://js.stripe.com https://chat.grobotix.ai https://*.firebaseapp.com; object-src 'none'; base-uri 'self'- strict-transport-security
max-age=31556926