cos.guide

Live preview

This site sends "X-Frame-Options: SAMEORIGIN", which blocks embedding it here.

Since cos.guide can't be embedded live, this is a captured screenshot instead — a snapshot from whenever it was last rendered, not necessarily this exact moment.

HTTP & security headers

Response

Server

cloudflare

Content-Type

text/html; charset=utf-8

Cache-Control

no-store, no-cache, must-revalidate

Content-Encoding

Not sent

Security

Content-Security-Policy

default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://analytics.google.com https://www.clarity.ms https://scripts.clarity.ms https://www.google.com https://www.gstatic.com https://js.stripe.com https://*.js.stripe.com https://checkout.stripe.com https://cdn.jsdelivr.net https://platform.x.com https://platform.twitter.com https://cdn.syndication.twimg.com https://static.cloudflareinsights.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://pbs.twimg.com https://www.google-analytics.com https://region1.google-analytics.com https://analytics.google.com https://*.g.doubleclick.net https://www.googletagmanager.com https://www.google.com https://*.clarity.ms https://c.bing.com https://js.stripe.com https://api.stripe.com https://checkout.stripe.com https://fonts.googleapis.com https://fonts.gstatic.com https://cloudflareinsights.com; frame-src 'self' https://www.google.com https://recaptcha.google.com https://platform.twitter.com https://platform.x.com https://syndication.twitter.com https://js.stripe.com https://*.js.stripe.com https://checkout.stripe.com https://hooks.stripe.com; media-src 'self' data: blob: https://video.twimg.com https://*.twimg.com; worker-src 'self' blob:; frame-ancestors 'self'; object-src 'none'; base-uri 'self'

Strict-Transport-Security

max-age=31536000

X-Frame-Options

SAMEORIGIN

X-Content-Type-Options

nosniff, nosniff

Referrer-Policy

strict-origin-when-cross-origin, strict-origin-when-cross-origin

Permissions-Policy

camera=(), microphone=(), geolocation=()

What each security header does

Redirect chain

1. 1.http://cos.guide/HTTP 301

   → https://cos.guide/

2. 2.https://cos.guide/HTTP 200

Meta tags

Title

コスピクセル | コスプレ写真が集まるギャラリー

Description

コスピクセルはレイヤー/カメラマン向けの写真ギャラリーサービスです。コスプレ写真を、ちゃんと残せる場所。撮った写真、作った写真を検索して楽しみたいあなたへ。タイムラインで流れてしまう写真を、作品別・キャラクター別に整理して、いつでも見返せる作品集として残せます。

Canonical

https://cos.guide/

Robots

Not set

Generator

Not set

Open Graph title

コスピクセル | コスプレ写真が集まるギャラリー

Open Graph description

コスピクセルはレイヤー/カメラマン向けの写真ギャラリーサービスです。コスプレ写真を、ちゃんと残せる場所。撮った写真、作った写真を検索して楽しみたいあなたへ。タイムラインで流れてしまう写真を、作品別・キャラクター別に整理して、いつでも見返せる作品集として残せます。

Open Graph image

https://cos.guide/img/x-card-and-ogp.jpg?ver=2026102116

Open Graph type

website

Twitter card

summary_large_image

Twitter title

コスピクセル | コスプレ写真が集まるギャラリー

Twitter image

https://cos.guide/img/x-card-and-ogp.jpg?ver=2026102116

robots.txt

Disallow rules (User-agent: *)

9

Disallow rules (other agents)

62

Technology detected

Best-effort, based on a small set of well-known signals — this may be incomplete.

• Cloudflarecdn

  Server: cloudflare

• Google Analyticsanalytics

  Found "googletagmanager.com/gtag/js" in the page's HTML

• PHPother

  Cookie set: PHPSESSID

Related domains