This is a subdomain of crabscan.ai that we keep intentionally under-configured. It exists so that anonymous visitors on the CrabScan homepage can run a demo scan against a real domain and see a real AI-generated report, without us scanning arbitrary third-party infrastructure.
Missing here on purpose: Content-Security-Policy,
Strict-Transport-Security,
X-Frame-Options, X-Content-Type-Options,
Referrer-Policy, Permissions-Policy.