Skip to main content
SGSiteGraph

matcha.xyz

Matcha | DEX aggregator by 0x | Search, trade, done.

Last scanned Jul 27, 2026, 9:43 AM · 1 view

80

Overall score

Great

Summary

Matcha DEX aggregator | Search and trade over +9 million tokens across +100 exchanges on 17 chains. This website uses Next.js hosted on AWS behind Vercel CDN. SEO is good (75/100) and accessibility is good (80/100). Security scores fair (65/100) and performance excellent (100/100). Top issue: No H1 heading found.

Matcha DEX aggregator | Search and trade over +9 million tokens across +100 exchanges on 17 chains. Trade now.

United States
Hosted on AWS

Top issues to fix

9 issues found · 3 high priority

  • Missing Strict-Transport-Security header

    Security

    Add HSTS so browsers always use HTTPS — this closes the protocol-downgrade attack window.

  • Missing Content-Security-Policy header

    Security

    Add a CSP to control which sources can run scripts — the strongest single defense against XSS.

  • No H1 heading found

    SEO

    Add exactly one H1 describing the page's main topic — it anchors the document outline for search engines and screen readers.

  • Missing X-Content-Type-Options header

    Security

    Add X-Content-Type-Options: nosniff to stop MIME-sniffing attacks.

  • Missing X-Frame-Options header

    Security

    Add X-Frame-Options (or a CSP frame-ancestors rule) to prevent clickjacking via hidden iframes.

  • No structured data (JSON-LD) found

    SEO

    Add JSON-LD (Organization, Article, Product…) to become eligible for rich results.

+3 more issues — details in the sections below.

75

SEO

3 issue(s) found

100

Performance

7 ms

65

Security

HTTPS & header checks

80

Accessibility

2 issue(s) found

Not enough scan history yet to show a trend — check back after this site has been re-scanned a few more times.

Organization

Company details published in this site's own structured data.

Matcha DEX aggregator | Search and trade over +9 million tokens across +100 exchanges on 17 chains. Trade now.

Meta tags

Title
Matcha | DEX aggregator by 0x | Search, trade, done.
Description
Matcha DEX aggregator | Search and trade over +9 million tokens across +100 exchanges on 17 chains. Trade now.
Canonical
https://matcha.xyz
Language
Charset
utf-8
Viewport
width=device-width, initial-scale=1, viewport-fit=cover
Robots meta
index,follow,max-snippet:113,noarchive
Manifest
https://matcha.xyz/site.webmanifest

OpenGraph & Twitter Card

OpenGraph

og:title
Matcha | DEX aggregator by 0x | Search, trade, done.
og:description
Matcha DEX aggregator | Search and trade over +9 million tokens across +100 exchanges on 17 chains. Trade now.
og:type
website
og:url
https://matcha.xyz

Twitter Card

twitter:card
summary_large_image
twitter:title
Matcha | DEX aggregator by 0x | Search, trade, done.
twitter:description
Matcha DEX aggregator | Search and trade over +9 million tokens across +100 exchanges on 17 chains. Trade now.

Technologies

Detected frameworks, languages, and tools.

Hosting & CDN

Hosting provider
AWS
CDN provider
Vercel
IP address
64.239.109.1
ASN
AS16509 (AMAZON-02 - Amazon.com, Inc., US)

DNS records

TypeValue
A
  • 64.239.109.1
AAAA
MX
  • aspmx3.googlemail.com
  • aspmx.l.google.com
  • alt2.aspmx.l.google.com
  • aspmx2.googlemail.com
  • alt1.aspmx.l.google.com
TXT
  • google-site-verification=wGl4ZAJoEItVN3IUHzn3a374rOrQGuKLmGKMZcwpEUE
  • v=spf1 include:_spf.google.com ~all
  • wallet-connect-dns-verification=debb33304ea20c5f8684878e854caa3240d0232a4b47aafaaf2c704b76d5b378
  • google-site-verification=vm99x5eWfISZi85j_AlPjlSDtuIDO7eSGDCHFuF3BSg
  • proxy-ssl.webflow.com
NS
  • harley.ns.cloudflare.com
  • michelle.ns.cloudflare.com
CAA
  • 0 issue "digicert.com; cansignhttpexchanges=yes"
  • 0 issuewild "letsencrypt.org"
  • 0 issue "pki.goog; cansignhttpexchanges=yes"
  • 0 issuewild "digicert.com; cansignhttpexchanges=yes"
  • 0 issuewild "amazon.com"
  • 0 issuewild "ssl.com"
  • 0 issuewild "pki.goog; cansignhttpexchanges=yes"
  • 0 issue "ssl.com"
  • 0 issue "comodoca.com"
  • 0 issuewild "comodoca.com"
  • 0 issue "letsencrypt.org"
  • 0 issue "amazon.com"
CNAME
IPv6 supportNo

TLS / SSL certificate

Version
TLS 1.3
Issuer
Let's Encrypt
Subject
matcha.xyz
Valid from
Jul 22, 2026
Valid to
Oct 20, 2026
Days until expiry
85
SAN domains
matcha.xyz

Security headers

  • Strict-Transport-SecurityMissing
  • Content-Security-PolicyMissing
  • X-Frame-OptionsMissing
  • X-Content-Type-OptionsMissing
  • Referrer-PolicyMissing
  • Permissions-PolicyMissing

Compression: none · 0 cookie(s) observed

Content & assets

Headings

H1 0 · H2 1 · H3 0

Links

29 internal · 11 external · 20 broken

Images

226 total · 1 missing alt

Scripts / Styles

146 scripts · 4 stylesheets

JS / CSS size

21.1 KB · 14.9 KB

Page size

33.0 KB

Robots.txt & Sitemap

robots.txt
Found
Disallow rules
0
sitemap.xml
Not found
URLs in sitemap
0

SEO issues

  • No H1 heading found
  • No structured data (JSON-LD) found
  • sitemap.xml not found

Accessibility issues

  • No H1 heading found
  • Missing <html lang> attribute

Scan details

Requested URL
https://matcha.xyz
Final URL
https://matcha.xyz
HTTP status
429
HTTP version
HTTP/2
Response time
7 ms
HTML size
33.0 KB
Redirect chain
https://matcha.xyz

See something wrong on this report? Request a correction

Frequently asked questions

What technology does matcha.xyz use?
matcha.xyz is built with Next.js.
Is matcha.xyz secure (HTTPS)?
Yes. matcha.xyz uses TLS 1.3 with a certificate issued by Let's Encrypt, valid until Oct 20, 2026.
Who hosts matcha.xyz?
matcha.xyz is hosted on AWS, behind Vercel CDN.
What is matcha.xyz's SEO score?
matcha.xyz scored 75/100 for SEO in the latest analysis (fair).
What is matcha.xyz's overall website score?
matcha.xyz has an overall SiteGraph score of 80/100, combining SEO, performance, security, and accessibility.