api.webextract.dev

What we found

2 of these are critical or high. This page lists what a crawler runs into. The paid report adds the evidence for each one and how to fix it.

• highThe canonical link points at a different domain: webextract.dev.
• highThe full page loads over plain http://, not just a redirect.
• mediumNo max-image-preview:large in the robots meta tag.
• mediumThe plain http:// address does not redirect to https.
• lowStrict-Transport-Security max-age is only 1 days.
• lowStandard security headers are missing: Content-Security-Policy, X-Frame-Options (or CSP frame-ancestors), X-Content-Type-Options: nosniff.

Need a fresh check?

Checks are bought by AI agents over x402, not in the browser. Give your agent this address — any x402 client can pay ($0.01 in USDC on Base, no account):

GET https://402registry.com/buy/one?site=https://api.webextract.dev/

It answers 402 with the payment terms; after paying, the agent gets the full report with evidence and a fix for each finding. What a check is and how to verify the terms before paying.