genstory.app
HTML metadata
Technology
- CDN
- Vercel
- CMS
- Next.js
- Analytics
-
- Google Analytics
- Google Tag Manager
- Ads
-
- Google AdSense
- Fonts
-
- Google Fonts
Third-party hosts loaded (13)
- pub-529ba1e5f78d46c395f0b7bfce872f54.r2.dev×12
- cdn.prod.website-files.com×6
- aiwith.me×3
- findly.tools×3
- media.theresanaiforthat.com×3
- www.foundrlist.com×3
- www.googletagmanager.com×3
- www.rilna.net×3
- www.toolpilot.ai×3
- fonts.googleapis.com×2
- fonts.gstatic.com×2
- pagead2.googlesyndication.com×1
- www.google-analytics.com×1
Social
Contact
DNS records live
- NS
-
- kipp.ns.cloudflare.com
- selah.ns.cloudflare.com
- MX
-
- 10 mxbiz2.qq.com
- 5 mxbiz1.qq.com
- TXT
-
google-site-verification=EB1lEh9fb3R2I-_O833fmUvwfLciFYzCtSj2q-BXcG8pinterest-site-verification=8e98ab53a07129a0722ce23235b04fbb
Email authentication partial
- SPF
-
v=spf1 include:spf.mail.qq.com ~allsoftfail (~all) - DMARC
-
v=DMARC1;p=none;policy: none (monitoring only) - DKIM
- no key found at common selectors
Certificate (current)
R12
Expires in 61 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- missing frame protection
- missing content type protection
- missing Referrer Policy
- missing Permissions Policy
Header values
- content-security-policy
default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://js.stripe.com https://va.vercel-scripts.com https://accounts.google.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://accounts.google.com; font-src 'self' http://at.alicdn.com https://at.alicdn.com https://m.stripe.network https://fonts.gstatic.com data: blob:; img-src 'self' data: https: blob:; connect-src 'self' https: wss: https://oauth2.googleapis.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net; media-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; frame-src 'self' https://js.stripe.com https://accounts.google.com https://googleads.g.doubleclick.net https://tpc.googlesyndication.com;- strict-transport-security
max-age=63072000
Links to (21)
- youtube.com×3
- foundrlist.com×3
- shipybara.com×3
- startupfa.me×3
- theresanaiforthat.com×3
- toolpilot.ai×3
- viesearch.com×3
- x.com×3
- aidirs.org×3
- aishenqi.net×3
- aitoolgo.com×3
- aiwith.me×3
- dang.ai×3
- fazier.com×3
- xchatdownload.net×2
- xscopilot.com×1
- rilna.net×1
- articuler.ai×1
- mossai.org×1
- aitooltrek.com×1
- submitaitools.org×1