What technology does allorigins.win use?

allorigins.win is built with Umami.

Is allorigins.win secure (HTTPS)?

Yes. allorigins.win uses TLS 1.3 with a certificate issued by Google Trust Services, valid until Oct 5, 2026.

Who hosts allorigins.win?

Hosting provider information for allorigins.win is not available yet.

What is allorigins.win's SEO score?

allorigins.win scored 60/100 for SEO in the latest analysis (fair).

What is allorigins.win's overall website score?

allorigins.win has an overall SiteGraph score of 77/100, combining SEO, performance, security, and accessibility.

allorigins.win

All Origins

Last scanned Jul 26, 2026, 5:47 AM · 1 view

Overall score

Fair

Summary

Pull contents from any page via API (as JSON/P or raw) and avoid Same-origin policy problems. This website uses Umami behind Cloudflare CDN. SEO is fair (60/100) and accessibility is excellent (90/100). Security scores fair (65/100) and performance excellent (100/100). Top issue: Missing canonical link.

Pull contents from any page via API (as JSON/P or raw) and avoid Same-origin policy problems.

Top issues to fix

11 issues found · 3 high priority

Missing Strict-Transport-Security header
Security
Add HSTS so browsers always use HTTPS — this closes the protocol-downgrade attack window.
Missing Content-Security-Policy header
Security
Add a CSP to control which sources can run scripts — the strongest single defense against XSS.
No H1 heading found
SEO
Add exactly one H1 describing the page's main topic — it anchors the document outline for search engines and screen readers.
Missing X-Content-Type-Options header
Security
Add X-Content-Type-Options: nosniff to stop MIME-sniffing attacks.
Missing X-Frame-Options header
Security
Add X-Frame-Options (or a CSP frame-ancestors rule) to prevent clickjacking via hidden iframes.
Missing canonical link
SEO
Add <link rel="canonical"> so search engines know which URL variant to index.

+5 more issues — details in the sections below.

SEO

6 issue(s) found

100

Performance

239 ms

Security

HTTPS & header checks

Accessibility

1 issue(s) found

Not enough scan history yet to show a trend — check back after this site has been re-scanned a few more times.

Organization

Company details published in this site's own structured data.

Pull contents from any page via API (as JSON/P or raw) and avoid Same-origin policy problems.

Meta tags

Title: All Origins
Description: Pull contents from any page via API (as JSON/P or raw) and avoid Same-origin policy problems.
Canonical
Language: en-us
Charset: UTF-8
Viewport: width=device-width, initial-scale=1
Robots meta
Manifest

Technologies

Detected frameworks, languages, and tools.

Umami

Hosting & CDN

Hosting provider: —
CDN provider: Cloudflare
IP address: —
ASN: —

DNS records

Type	Value
A	—
AAAA	—
MX	—
TXT	—
NS	—
CAA	—
CNAME	—
IPv6 support	No

TLS / SSL certificate

Version: TLS 1.3
Issuer: Google Trust Services
Subject: allorigins.win
Valid from: Jul 7, 2026
Valid to: Oct 5, 2026
Days until expiry: 68
SAN domains: allorigins.win, *.allorigins.win

Security headers

Strict-Transport-SecurityMissing
Content-Security-PolicyMissing
X-Frame-OptionsMissing
X-Content-Type-OptionsMissing
Referrer-PolicyMissing
Permissions-PolicyMissing

Compression: gzip · 0 cookie(s) observed

Content & assets

Headings

H1 0 · H2 0 · H3 2

Links

0 internal · 8 external · 8 broken

Images

0 total · 0 missing alt

Scripts / Styles

4 scripts · 1 stylesheets

JS / CSS size

2.0 KB · 1.6 KB

Page size

11.3 KB

Robots.txt & Sitemap

robots.txt: Not found
Disallow rules: 0
sitemap.xml: Not found
URLs in sitemap: 0

SEO issues

Missing canonical link
No H1 heading found
No structured data (JSON-LD) found
Missing OpenGraph tags
robots.txt not found
sitemap.xml not found

Scan details

Requested URL: https://allorigins.win
Final URL: https://allorigins.win
HTTP status: 200
HTTP version: HTTP/2
Response time: 239 ms
HTML size: 11.3 KB
Redirect chain: https://allorigins.win

See something wrong on this report? Request a correction

Same technology stack

karafun.com

Online Karaoke with a wide selection of songs on KaraFun

nginxgoogle-analyticsumami

Fastly· Fastly

edmentum.com

Edmentum

nginxgoogle-analyticsmeta-pixel

AWS· CloudFront

cryptomator.org

Cryptomator - Free & Open-Source Cloud Storage Encryption

umamijquery

Cloudflare· Cloudflare

studyisland.com

Study Island | Edmentum

nginxumami

AWS· CloudFront

stck.me

Join the movement. Sell your work directly to fans around the world. - Stck

nginxgoogle-analyticsumami

DigitalOcean

tablecheck.com

TableCheck - Reservations at Japan's Best Restaurants

expressumaminodejs

AWS· Fastly

Frequently asked questions

What technology does allorigins.win use?: allorigins.win is built with Umami.
Is allorigins.win secure (HTTPS)?: Yes. allorigins.win uses TLS 1.3 with a certificate issued by Google Trust Services, valid until Oct 5, 2026.
Who hosts allorigins.win?: Hosting provider information for allorigins.win is not available yet.
What is allorigins.win's SEO score?: allorigins.win scored 60/100 for SEO in the latest analysis (fair).
What is allorigins.win's overall website score?: allorigins.win has an overall SiteGraph score of 77/100, combining SEO, performance, security, and accessibility.