allorigins.win
All Origins
Last scanned Aug 5, 2026, 6:00 PM · 13 views
Overall score
Fair
Summary
Pull contents from any page via API (as JSON/P or raw) and avoid Same-origin policy problems. This website uses Umami hosted on Cloudflare behind Cloudflare CDN. SEO is fair (65/100) and accessibility is excellent (90/100). Security scores fair (65/100) and performance good (85/100). Top issue: Missing canonical link.
Pull contents from any page via API (as JSON/P or raw) and avoid Same-origin policy problems.
- United States
- Hosted on Cloudflare
Top issues to fix
9 issues found · 3 high priority
Missing Strict-Transport-Security header
SecurityAdd HSTS so browsers always use HTTPS — this closes the protocol-downgrade attack window.
Missing Content-Security-Policy header
SecurityAdd a CSP to control which sources can run scripts — the strongest single defense against XSS.
No H1 heading found
SEOAdd exactly one H1 describing the page's main topic — it anchors the document outline for search engines and screen readers.
Missing X-Content-Type-Options header
SecurityAdd X-Content-Type-Options: nosniff to stop MIME-sniffing attacks.
Missing X-Frame-Options header
SecurityAdd X-Frame-Options (or a CSP frame-ancestors rule) to prevent clickjacking via hidden iframes.
Missing canonical link
SEOAdd <link rel="canonical"> so search engines know which URL variant to index.
+3 more issues — details in the sections below.
SEO
5 issue(s) found
Performance
222 ms
Security
HTTPS & header checks
Accessibility
1 issue(s) found
Score history
-2 overall since Jul 26, 2026
- Overall
- 75
- SEO
- 65
- Security
- 65
- Performance
- 85
- Accessibility
- 90
Organization
Company details published in this site's own structured data.
Pull contents from any page via API (as JSON/P or raw) and avoid Same-origin policy problems.
Meta tags
- Title
- All Origins
- Description
- Pull contents from any page via API (as JSON/P or raw) and avoid Same-origin policy problems.
- Canonical
- Language
- en-us
- Charset
- UTF-8
- Viewport
- width=device-width, initial-scale=1
- Robots meta
- Manifest
Technologies
Detected frameworks, languages, and tools.
Hosting & CDN
- Hosting provider
- Cloudflare
- CDN provider
- Cloudflare
- IP address
- 172.67.219.140
- ASN
- AS13335 (CLOUDFLARENET - Cloudflare, Inc., US)
DNS records
| Type | Value |
|---|---|
| A |
|
| AAAA |
|
| MX | — |
| TXT | — |
| NS |
|
| CAA | — |
| CNAME | — |
| IPv6 support | Yes |
TLS / SSL certificate
- Version
- TLS 1.3
- Issuer
- Google Trust Services
- Subject
- allorigins.win
- Valid from
- Jul 7, 2026
- Valid to
- Oct 5, 2026
- Days until expiry
- 60
- SAN domains
- allorigins.win, *.allorigins.win
Security headers
- Strict-Transport-SecurityMissing
- Content-Security-PolicyMissing
- X-Frame-OptionsMissing
- X-Content-Type-OptionsMissing
- Referrer-PolicyMissing
- Permissions-PolicyMissing
Compression: gzip · 0 cookie(s) observed
Content & assets
Headings
H1 0 · H2 0 · H3 2
Links
0 internal · 8 external · 0 broken
Images
0 total · 0 missing alt
Scripts / Styles
4 scripts · 1 stylesheets
JS / CSS size
1.1 MB · 107 KB
Page size
11.3 KB
Robots.txt & Sitemap
- robots.txt
- Found
- Disallow rules
- 0
- sitemap.xml
- Not found
- URLs in sitemap
- 0
SEO issues
- Missing canonical link
- No H1 heading found
- No structured data (JSON-LD) found
- Missing OpenGraph tags
- sitemap.xml not found
Accessibility issues
- No H1 heading found
Scan details
- Requested URL
- https://allorigins.win
- Final URL
- https://allorigins.win
- HTTP status
- 200
- HTTP version
- HTTP/2
- Response time
- 222 ms
- HTML size
- 11.3 KB
- Redirect chain
- https://allorigins.win
See something wrong on this report? Request a correction
Related websites
Same technology stack
aitextwatermarkremover.com
AI Text Watermark Remover: Clean or Reconstruct
studyisland.com
Study Island | Edmentum
karafun.com
Online Karaoke with a wide selection of songs on KaraFun
cryptomator.org
Cryptomator - Free & Open-Source Cloud Storage Encryption
mycom.nl
MyCom -
implisense.com
Implisense — Analytik für den deutschen Markt | Implisense
Same hosting provider
karinderya.org
Karinderya Wiki & Guides — Codes, Workers & Updates
logiclinkrepair.com
Logic Link Repair | PC, Mac & Phone Repair in Kalispell, MT
herodash.ai
AI Customer Service Platform for Global Teams | HeroDash
emplifyhealth.org
Emplify Health | A Little Empathy Changes Everything
nudeclap.com
Naked Girls Porn: Free HD Nude Sex Videos
rbj.net
Rochester Business Journal
Frequently asked questions
- What technology does allorigins.win use?
- allorigins.win is built with Umami.
- Is allorigins.win secure (HTTPS)?
- Yes. allorigins.win uses TLS 1.3 with a certificate issued by Google Trust Services, valid until Oct 5, 2026.
- Who hosts allorigins.win?
- allorigins.win is hosted on Cloudflare, behind Cloudflare CDN.
- What is allorigins.win's SEO score?
- allorigins.win scored 65/100 for SEO in the latest analysis (fair).
- What is allorigins.win's overall website score?
- allorigins.win has an overall SiteGraph score of 75/100, combining SEO, performance, security, and accessibility.
- Has allorigins.win's score changed over time?
- allorigins.win's overall score has declined by 2 points (from 77 to 75) since Jul 26, 2026.
OpenGraph & Twitter Card
OpenGraph
Twitter Card