indexo.dev

canplaycasinos.com

.com crawl

First seen 2026-05-12 · Last seen 2026-05-18 · ok HTTP/1.1 200 1821 ms crawled 2026-05-18

US · 138.197.53.228 · AS14061 DigitalOcean, LLC

Reputation 100/100

Classifying

HTML metadata

Title
Top Online and Mobile Gaming at CanPlay for Canadian Players
Description
CanPlay Casino provides the perfect choice of games, rewards and support for Canadian players, giving instant online and mobile access throughout the day and night.
Language
en
Canonical
https://www.canplaycasinos.com/

Technology

Server
nginx
CMS
Nuxt

Third-party hosts loaded (1)

  • service.nyc3.cdn.digitaloceanspaces.com×26

Contact

Email

Registration

Registrar
GoDaddy.com, LLC
Created
2021-09-03
Expires
2026-09-03 105 days left
Updated
2025-08-25
Name servers
  • ns1.digitalocean.com
  • ns2.digitalocean.com
  • ns3.digitalocean.com

DNS records live

NS
  • ns1.digitalocean.com
  • ns2.digitalocean.com
  • ns3.digitalocean.com

Email authentication no MX

SPF
not published
DMARC
not published
DKIM
no key found at common selectors

Certificate (current)

R13
from 2026-04-09 to 2026-07-08
Expires in 48 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://www.canplaycasinos.com/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
  • cross-origin-opener-policy
  • cross-origin-embedder-policy
  • cross-origin-resource-policy
findings
  • CSP allows unsafe inline scripts/styles
Header values
referrer-policy
no-referrer
x-frame-options
SAMEORIGIN
permissions-policy
camera=(), display-capture=(), fullscreen=(), geolocation=(), microphone=()
x-content-type-options
nosniff
content-security-policy
base-uri 'none'; font-src 'self' https: data:; form-action 'self'; frame-ancestors 'self'; img-src 'self' data: https://service.nyc3.cdn.digitaloceanspaces.com; object-src 'none'; script-src-attr 'none'; style-src 'self' https: 'unsafe-inline'; script-src 'self' https: 'unsafe-inline'; upgrade-insecure-requests;
strict-transport-security
max-age=15552000; includeSubDomains
cross-origin-opener-policy
same-origin
cross-origin-embedder-policy
credentialless
cross-origin-resource-policy
same-origin

Linked from (1)