trylapis.com

HTML metadata

Title: Lapis | The Best Way to Create Professional Image Ads
Description: Try Lapis free and create professional image ads in seconds. Generate on-brand creatives for Facebook, Instagram, Google and more. No design skills needed.
Language: en
Canonical: https://www.trylapis.com

Open Graph

url: https://www.trylapis.com
title: Lapis | The Best Way to Create Professional Image Ads
locale: en_US
site name: Lapis
description: Try Lapis free and create professional image ads in seconds. Generate on-brand creatives for Facebook, Instagram, Google and more. No design skills needed.

Technology

CDN: Vercel
CMS: Next.js

Analytics

Google Analytics
Google Tag Manager

Ads

Meta Pixel

Third-party hosts loaded (4)

www.googletagmanager.com×2
connect.facebook.net×1
www.facebook.com×1
www.google-analytics.com×1

Social

Contact

Email

contact@trylapis.com

Registration

Registrar

NameCheap, Inc.

Created

2025-06-01

Expires

2027-06-01 378 days left

Updated

2026-05-02

Name servers

dns1.registrar-servers.com
dns2.registrar-servers.com

DNS records live

NS

dns1.registrar-servers.com
dns2.registrar-servers.com

MX

1 smtp.google.com

TXT

google-site-verification=2yHwHVb-iNPmksqD187Y13yLZoaApRdJ44DIQFEGSfs
google-site-verification=JveoHzDDL5Z3nNMcHyta-ZkRt2KfOtGQuffSX92UV6c
linkedin-site-verification=965a02b6-663c-494a-b904-82a47f68e0a5

Email authentication strong

SPF

v=spf1 include:_spf.google.com ~all

softfail (~all)

DMARC

v=DMARC1;p=quarantine;sp=quarantine;pct=100;rua=mailto:postmaster@trylapis.com;ruf=mailto:postmaster@trylapis.com;ri=86400;aspf=r;adkim=r;fo=1;

policy: quarantine · sp=quarantine

DKIM

google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWzrmyiRbS4chwTpAeM1WlPSUfCed9VcEVI5bCdGDm0NRr5e74FvuW3DqSpayZg8zjesbf+dZPB/M7…

selectors probed

Certificate (current)

R13

from 2026-04-28 to 2026-07-27

Expires in 69 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.trylapis.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: DENY
permissions-policy: camera=(), microphone=(), geolocation=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://js.stripe.com https://*.sentry.io https://*.google.com https://www.googletagmanager.com https://www.google-analytics.com https://widget.intercom.io https://js.intercomcdn.com https://*.posthog.com https://connect.facebook.net https://cdn.trylapis.com https://app.cal.com https://va.vercel-scripts.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https: http:; font-src 'self' https://fonts.gstatic.com https://js.intercomcdn.com; connect-src 'self' http://localhost:8000 https://*.lapis.so https://*.up.railway.app https://*.amazonaws.com https://*.sentry.io https://*.stripe.com https://*.google-analytics.com https://*.analytics.google.com https://www.google.com https://region1.google-analytics.com https://*.intercom.io https://*.intercomcdn.com https://*.posthog.com https://*.i.posthog.com https://connect.facebook.net https://www.facebook.com https://app.cal.com wss: ws:
strict-transport-security: max-age=63072000; includeSubDomains; preload

Links to (4)

Linked from (1)

johnloeber.com×2