attr.so

Live preview

This site sends "X-Frame-Options: SAMEORIGIN", which blocks embedding it here.

Since attr.so can't be embedded live, this is a captured screenshot instead — a snapshot from whenever it was last rendered, not necessarily this exact moment.

HTTP & security headers

Response

Server

cloudflare

Content-Type

text/html; charset=utf-8

Cache-Control

private, no-cache, no-store, max-age=0, must-revalidate

Content-Encoding

Not sent

Security

Content-Security-Policy

default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://challenges.cloudflare.com https://js.stripe.com https://*.posthog.com https://*.i.posthog.com https://www.googletagmanager.com https://*.sentry.io https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://*.supabase.co wss://*.supabase.co https://zdpupmuuekamowwsvcqu.supabase.co wss://zdpupmuuekamowwsvcqu.supabase.co https://api.stripe.com https://*.posthog.com https://*.i.posthog.com https://*.sentry.io https://*.ingest.sentry.io https://challenges.cloudflare.com https://www.google-analytics.com https://tiles.openfreemap.org; frame-src 'self' https://js.stripe.com https://hooks.stripe.com https://challenges.cloudflare.com https://www.youtube.com https://player.vimeo.com https://fast.wistia.net https://*.wistia.com https://www.loom.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'

Strict-Transport-Security

max-age=63072000; includeSubDomains; preload

X-Frame-Options

SAMEORIGIN

X-Content-Type-Options

nosniff

Referrer-Policy

strict-origin-when-cross-origin

Permissions-Policy

camera=(), microphone=(), geolocation=(), interest-cohort=()

What each security header does

Redirect chain

1. 1.http://attr.so/HTTP 308

   → https://attr.so/

2. 2.https://attr.so/HTTP 200

Meta tags

Title

Attr.so - Know where your clicks come from

Description

Privacy-first shortlinks with click attribution. Branded short URLs, UTM tagging, custom domains, and a real REST API. Free for up to 50 links a month.

Canonical

Not set

Robots

Not set

Generator

Not set

Open Graph title

Attr.so - Know where your clicks come from

Open Graph description

Privacy-first shortlinks with click attribution. Branded short URLs, UTM tagging, custom domains, and a real REST API. Free for up to 50 links a month.

Open Graph image

https://attr.so/og-image.png?v=2

Open Graph type

website

Twitter card

summary_large_image

Twitter title

Attr.so - Know where your clicks come from

Twitter image

https://attr.so/og-image.png?v=2

robots.txt

Disallow rules (User-agent: *)

7

Disallow rules (other agents)

0

Technology detected

Best-effort, based on a small set of well-known signals — this may be incomplete.

• Cloudflarecdn

  Server: cloudflare

• Next.jsframework

  X-Powered-By: Next.js

• Google Analyticsanalytics

  Found "googletagmanager.com/gtag/js" in the page's HTML

Related domains