selfclaw.app
HTML metadata
Technology
- Server
- Fonts
-
- Google Fonts
Third-party hosts loaded (4)
- fonts.googleapis.com×2
- cdn.socket.io×1
- fonts.gstatic.com×1
- selfclaw.ai×1
Social
DNS records live
- NS
-
- ns1cny.name.com
- ns2ckr.name.com
- ns3jkl.name.com
- ns4hny.name.com
- TXT
-
replit-verify=f73e8204-38b5-4a84-b61b-bbb9ab7731b8
Email authentication no MX
- SPF
- not published
- DMARC
-
v=DMARC1; p=reject; sp=reject; pct=100;policy: reject (enforced) · sp=reject - DKIM
- no key found at common selectors
Certificate (current)
E8
Expires in 61 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- cross-origin-resource-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Permissions Policy
Header values
- referrer-policy
no-referrer- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
default-src 'self';script-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://unpkg.com https://cdn.socket.io;style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net;font-src 'self' https://fonts.gstatic.com https://fonts.reown.com https://cdn.jsdelivr.net;img-src 'self' data: https: blob:;connect-src 'self' https://forno.celo.org https://mainnet.base.org https://base.llamarpc.com https://api.dexscreener.com https://redirect.self.xyz https://passport.talentprotocol.com https://api.qrserver.com https://*.alchemy.com wss://*.walletconnect.com https://*.walletconnect.com https://*.reown.com wss://*.reown.com https://api.web3modal.org https://api.web3modal.com https://pulse.walletconnect.org wss://relay.walletconnect.com wss://relay.walletconnect.org;frame-src 'self' https://app.uniswap.org https://verify.walletconnect.com https://verify.walletconnect.org;object-src 'none';base-uri 'self';form-action 'self';script-src-attr 'unsafe-inline';worker-src '- strict-transport-security
max-age=63072000; includeSubDomains, max-age=31536000; includeSubDomains- cross-origin-resource-policy
same-origin
Links to (9)
- celo.org×2
- github.com×2
- self.xyz×2
- t.me×2
- talentprotocol.com×2
- uniswap.org×2
- wormhole.com×2
- x.com×2
- zhcinstitute.com×2
Linked from (1)
- self.xyz×2