mixels.ai

HTML metadata

Title: Pixel Art Maker · Pixelate Image & Photo to Pixel Art - Mixels.ai
Description: Free online pixel art maker. Pixelate any image, turn photos into pixel art, and create pixel characters and 8-bit avatars in seconds. The fastest AI pixel art generator and online studio for artists, hobbyists, and game devs.
Language: en
Canonical: https://mixels.ai

Open Graph

url: https://mixels.ai
title: Pixel Art Maker | Pixelate Image, Photo to Pixel Art & 8-Bit Avatars
site name: Mixels.ai
description: Free pixel art maker online. Pixelate any photo, turn pictures into pixel art, and create pixel characters and 8-bit avatars with grid-perfect results — no download required.

Technology

Server: railway-edge

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (5)

fonts.googleapis.com×4
datafa.st×1
fonts.gstatic.com×1
static.klaviyo.com×1
www.googletagmanager.com×1

Registration

Registrar

NameCheap, Inc.

Created

2025-11-30

Expires

2027-11-30 559 days left

Updated

2026-01-05

Name servers

charles.ns.cloudflare.com
collins.ns.cloudflare.com

DNS records live

NS

charles.ns.cloudflare.com
collins.ns.cloudflare.com

MX

1 aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

Show 5 TXT records

replit-verify=a2c80a8c-1a15-49f7-8e3e-3a3a0674af51
v=spf1 include:spf.resend.com include:amazonses.com include:_spf.google.com ~all
google-site-verification=D3HGAgfjgiJ8U9dva5DI-06LBHbbiqVqawfYnFJU9Qo
google-site-verification=Mi1nDt6AjxaCZAU71wB_0Xzjd6lXbdfR5ie4veYnOrM
klaviyo-site-verification=RBGfAM

Certificate (current)

R13

from 2026-03-23 to 2026-06-21

Expires in 33 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 65/100 Checked live page: https://mixels.ai/

present

content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

missing HSTS
CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' https://*.supabase.co https://js.stripe.com https://cdn.rdt.li https://www.redditstatic.com https://www.clarity.ms https://*.clarity.ms https://*.posthog.com https://us-assets.i.posthog.com https://www.googletagmanager.com https://www.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://static.ads-twitter.com https://ads-twitter.com https://ads-api.twitter.com https://analytics.twitter.com https://bat.bing.com https://datafa.st https://static.klaviyo.com https://static-tracking.klaviyo.com blob:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: blob: https://*.supabase.co https://*.stripe.com https://api.producthunt.com https://*.clarity.ms https://c.bing.com https://bat.bing.com https://alb.reddit.com https://*.posthog.com https://www.google-analytics.com https://*.google.com https://stats.g.doubleclick.n