matcha.xyz | Analytics by SecurityHeaders

HTTP Headers report for matcha.xyz

Header Name Header Data
HTTP status code 200
Content-Type text/html; charset=utf-8
X-Dns-Prefetch-Control on
Expect-Ct max-age=86400, enforce
Cross-Origin-Embedder-Policy require-corp; allow-embedding https://widget.intercom.io
Strict-Transport-Security max-age=15552000; includeSubDomains; preload
X-Permitted-Cross-Domain-Policies none
X-Content-Type-Options nosniff
X-Xss-Protection 1; mode=block
Date Mon, 07 Apr 2025 18:25:16 GMT
Connection keep-alive
Access-Control-Allow-Origin https://*.ingest.sentry.io
X-Frame-Options SAMEORIGIN
Cf-Ray 92cb910f4a5d8b43-AMS
Access-Control-Allow-Methods GET,POST,OPTIONS
Cross-Origin-Opener-Policy same-origin-allow-popups
Permissions-Policy accelerometer=(),autoplay=(),camera=(),display-capture=(),encrypted-media=(),fullscreen=(),gamepad=(),geolocation=(),gyroscope=(),magnetometer=(),microphone=(),midi=(),payment=(),picture-in-picture=(),publickey-credentials-get=(),sync-xhr=(self),usb=(),screen-wake-lock=(),xr-spatial-tracking=()
Vary accept-encoding
Content-Security-Policy frame-ancestors 'self' https://warpcast.com https://belongtous.xyz https://www.clanker.world https://clanker.world https://dev.clanker.world https://gdupi.art https://gdupi-web-1rvs.vercel.app/ https://moxie.uat.airstack.xyz https://www.moxie.xyz https://moxie.xyz https://moxie.dev.airstack.xyz https://dexscreener.com https://dex.guru https://matcha-iframe.vercel.app https://www.nounspace.com https://allyourbase.fun
Cf-Cache-Status DYNAMIC
Server cloudflare
Alt-Svc h3=":443"; ma=86400
Access-Control-Allow-Headers X-CSRF-Token, X-Requested-With, Accept, Accept-Version, Content-Length, Content-MD5, Content-Type, Date, X-Api-Version, sentry-trace, baggage
Cross-Origin-Resource-Policy same-origin
X-Matched-Path /
X-Vercel-Cache HIT
X-Vercel-Id fra1::iad1::jndt9-1744050316723-fbaefa93908c
Referrer-Policy same-origin
Age 98
Cache-Control public, max-age=0, must-revalidate

About the tool

By using SecurityHeaders.info, you can quickly identify missing or misconfigured headers and take steps to secure your website, improving both security and user confidence.

This tool is widely used by developers, security professionals, and organizations to ensure their websites adhere to best practices in web security.

We also have another analytic tool that is used for identifying popularity metrics, general information about the business, finding similar products and competitors, and much more.

Watch it now at TrustRadar