Security Analysis Results

private, no-cache, no-store, max-age=0, must-revalidate

DYNAMIC

local-MAD

95e399fb290c384a-MAD

28a21e87b70000384ad4853400000001

br

default-src 'self' assets-next.mattersprotocol.io; script-src 'self' assets-next.mattersprotocol.io 'unsafe-inline' 'unsafe-eval' www.googletagmanager.com challenges.cloudflare.com *.google-analytics.com *.analytics.google.com js.stripe.com *.cloudflareinsights.com pagead2.googlesyndication.com *.adtrafficquality.google *.doubleclick.net tpc.googlesyndication.com adservice.google.com; style-src 'self' 'unsafe-inline' assets-next.mattersprotocol.io fonts.googleapis.com; img-src 'self' data: blob: assets.matters.news imagedelivery.net assets-next.mattersprotocol.io *.matters.town nft-cdn.alchemy.com matters-server-production.s3-ap-southeast-1.amazonaws.com *.google-analytics.com *.walletconnect.com *.walletconnect.org matters-billboard-ad.s3.ap-southeast-1.amazonaws.com/ pagead2.googlesyndication.com googleads.g.doubleclick.net *.adtrafficquality.google; font-src 'self' fonts.gstatic.com; media-src 'self' data: blob: assets.matters.news imagedelivery.net assets-next.mattersprotocol.io *.matters.town nft-cdn.alchemy.com matters-server-production.s3-ap-southeast-1.amazonaws.com *.google-analytics.com *.walletconnect.com *.walletconnect.org matters-billboard-ad.s3.ap-southeast-1.amazonaws.com/ pagead2.googlesyndication.com googleads.g.doubleclick.net *.adtrafficquality.google; connect-src 'self' ws: wss: assets-next.mattersprotocol.io https://server.matters.town/graphql https://server.matters.news/graphql upload.imagedelivery.net *.google-analytics.com firebase.googleapis.com firebaseinstallations.googleapis.com fcmregistrations.googleapis.com api.stripe.com *.walletconnect.org *.walletconnect.com *.web3modal.org *.alchemyapi.io *.alchemy.com cloudflare-ipfs.com/ipfs/ ipfs.io/ipfs/ ipfs-gateway.matters.town/ipfs/ ipfs.w3s.link *.ingest.us.sentry.io *.adtrafficquality.google adservice.google.com *.doubleclick.net; frame-src 'self' button.like.co www.youtube.com player.vimeo.com player.bilibili.com www.bilibili.com www.instagram.com jsfiddle.net codepen.io challenges.cloudflare.com js.stripe.com hooks.stripe.com *.walletconnect.com *.walletconnect.org pagead2.googlesyndication.com googleads.g.doubleclick.net tpc.googlesyndication.com *.adtrafficquality.google; prefetch-src 'self' assets-next.mattersprotocol.io; report-uri https://o1089931.ingest.us.sentry.io/api/6153512/security/?sentry_key=5af839b6d42044548d8ec70f00af8c10; report-to csp-endpoint

text/html; charset=utf-8

Sat, 12 Jul 2025 21:23:24 GMT

{"group":"csp-endpoint","max_age":10886400,"endpoints":[{"url":"https://o1089931.ingest.us.sentry.io/api/6153512/security/?sentry_key=5af839b6d42044548d8ec70f00af8c10"}],"include_subdomains":true}

csp-endpoint="https://o1089931.ingest.us.sentry.io/api/6153512/security/?sentry_key=5af839b6d42044548d8ec70f00af8c10"

cloudflare

cfCacheStatus;desc="DYNAMIC" cfOrigin;dur=0,cfEdge;dur=540 cfReqDur;dur=3093.571

Accept-Encoding