Security Analysis Results

on-matcha.com

Comprehensive domain security and infrastructure analysis

Live Website Preview

website screenshot of https://on-matcha.fr/

No Security Risks Detected

This domain appears to be safe and secure

100%
Score

Disclaimer: This assessment is based on automated analysis of publicly available information. Results are for informational purposes only. For critical applications, consult security professionals.

Scan Information

Last checked:July 28, 2025 15:36:43
Scan Complete

Refresh page after 10 minutes
for updated results

Page Information

Target URL
https://on-matcha.fr/
Page Title
On Matcha
on-matcha.com faviconSite Favicon
Status
Active

Host Information

Domain
on-matcha.com
Server
cloudflare
Country
Canada
IP Address
23.227.38.32
ASN Information
13335
CLOUDFLARENET

Technologies

Shopify logo
Shopify
Ecommerce
Alpine.js logo
Alpine.js
JavaScript frameworks
Klaviyo logo
Klaviyo
Marketing automation
HSTS logo
HSTS
Security
Cloudflare logo
Cloudflare
CDN
HTTP/3 logo
HTTP/3
Miscellaneous

SSL Certificate

HTTPS Enabled
Secure
Certificate Issuer
49m400 Gateway Proxy BISO MITM CA
Valid From
2025-07-27 17:10:23
Valid Until
2025-08-26 17:10:53
Subject Name
on-matcha.com

Performance Statistics

78
Total Requests
11
Domains
10
IP Addresses
1.11 MB
Transfer Size
Content Size2.11 MB

HTTP Headers

alt-svc
h3=":443"; ma=86400
cf-cache-status
DYNAMIC
cf-ray
9665746768ba9a73-MRS
cf-team
28f3471235000100698c26f400000001
content-encoding
br
content-language
en-SE
content-security-policy
block-all-mixed-content; frame-ancestors 'none'; upgrade-insecure-requests;
content-type
text/html; charset=utf-8
date
Mon, 28 Jul 2025 15:36:53 GMT
etag
"cacheable:af34e668a60b8a359364e34d41c586b8"
link
<https://cdn.shopify.com>; rel="preconnect", <https://cdn.shopify.com>; rel="preconnect"; crossorigin, <//on-matcha.com/cdn/shop/t/3/assets/theme.css?v=66356681945630785051752153101>; as="style"; rel="preload"
nel
{"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
powered-by
Shopify
report-to
{"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MqrhzdcvQ22qnlBuP99XQGzmo7jiyj%2BStGTYtr%2Fgi9Ii8yByA3FwtpviLqg8H4ngkyy%2F%2BbLQgkw%2BSksg8NrgBYd%2BnCQznq1AVwuTxgA3sTlcGQT4MyrO9JgnySJDS3s%3D"}],"group":"cf-nel","max_age":604800}
server
cloudflare
server-timing
processing;dur=157;desc="gc:3", db;dur=42, db_async;dur=3.471, render;dur=19, asn;desc="13335", edge;desc="MRS", country;desc="SE", theme;desc="179946717517", pageType;desc="password", servedBy;desc="nr96", requestID;desc="da94fbba-8174-4010-83af-a9a812ea7c11-1753717013", _y;desc="00000000-0000-0000-5000-000000000000", _s;desc="00000000-0000-0000-5000-000000000000" cfRequestDuration;dur=227.999926 cfReqDur;dur=1012.865
shopify-complexity-score
1540
shopify-edge-ip
23.227.38.32
speculation-rules
"/cdn/shopifycloud/storefront/assets/storefront/storefronts.specrules-dd5621a1.json"
strict-transport-security
max-age=7889238
vary
Accept accept-encoding
x-content-type-options
nosniff
x-dc
gcp-europe-west1,gcp-europe-west1,gcp-europe-west1
x-download-options
noopen
x-frame-options
DENY
x-permitted-cross-domain-policies
none
x-request-id
da94fbba-8174-4010-83af-a9a812ea7c11-1753717013
x-robots-tag
nofollow
x-shardid
332
x-shopid
90429489485
x-sorting-hat-podid
332
x-sorting-hat-shopid
90429489485
x-storefront-renderer-rendered
1
x-xss-protection
1; mode=block
34 headers detected

Technology Stack Analysis

Shopify

Shopify

EcommerceCMS

Shopify is a subscription-based software that allows anyone to set up an online store and sell their products. Shopify store owners can also sell in physical locations using Shopify POS, a point-of-sale app and accompanying hardware.

Alpine.js

Alpine.js

JavaScript frameworks

No description available

Klaviyo

Klaviyo

Marketing automation

Klaviyo is an email and SMS marketing platform for online businesses.

HSTS

HSTS

Security

HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.

Cloudflare

Cloudflare

CDN

Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.

HTTP/3

HTTP/3

Miscellaneous

HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.

Website Cookies 5

keep_alive

on-matcha.com

Secure Strict
Value
eyJ2IjoyLCJ0cyI6MTc1MzcxNzA0NDAyNiwiZW52Ijp7IndkIjowLCJ1YSI6MSwiY3YiOjEsImJyIjoxfSwiYmh2Ijp7Im1hIjowLCJjYSI6MCwia2EiOjAsInNhIjowLCJ0YSI6MCwia2JhIjowLCJ0IjoyNSwibm0iOjAsIm1zIjowLCJtaiI6MCwibXNwIjowLCJ2YyI6MCwiY3AiOjAsInJjIjowLCJraiI6MCwia2kiOjAsInNzIjowLCJzaiI6MCwic3NtIjowLCJzcCI6MCwidHMiOjAsInRqIjowLCJ0cCI6MCwidHNtIjowfSwic2VzIjp7InAiOjEsInMiOjE3NTM3MTcwMTg5MzksImQiOjI1fX0%3D
Expires:Session

_tracking_consent

.on-matcha.com

Lax
Value
3.ampS_SEAB_t_f_15Sk*lI9TS61GXezvw2RPQ
Expires:7/28/2026

_shopify_essential

on-matcha.com

HttpOnly Secure Lax
Value
:AZhRrfjpAAEAvFRwuT_SrgPR1aFo6_UVegXFc1ddUSYtrrrn06RHsfJYDaaQ5v7h9l3ABrkYswsceddmU9gQxgJdrNBdcNxm2TTFci8F:
Expires:7/28/2026

cart_currency

on-matcha.com

Lax
Value
SEK
Expires:8/11/2025

localization

on-matcha.com

Lax
Value
SE
Expires:7/28/2026

External Links 4

Twitter

twitter.com

Analyze
Target URL
https://twitter.com/shopify

Facebook

facebook.com

Analyze
Target URL
https://facebook.com/shopify

Pinterest

pinterest.com

Analyze
Target URL
https://pinterest.com/shopify

Instagram

instagram.com

Analyze
Target URL
http://instagram.com/shopify

Requested Domains 11

app.simple-affiliate.com

Unknown Type
No category information available

cdn.shopify.com

Unknown Type
No category information available

fast.a.klaviyo.com

Unknown Type
No category information available

fonts.googleapis.com

Unknown Type
No category information available

fonts.gstatic.com

Unknown Type
No category information available

monorail-edge.shopifysvc.com

Unknown Type
No category information available

on-matcha.com

Unknown Type
No category information available

on-matcha.fr

Unknown Type
No category information available

static-forms.klaviyo.com

Unknown Type
No category information available

static-tracking.klaviyo.com

Unknown Type
No category information available

static.klaviyo.com

Unknown Type
No category information available
LinkCheck

© 2025 LinkCheck. Secure domain analysis you can trust.