alliance.xyz

.xyz crawl

First seen 2026-04-11 · Last seen 2026-05-19 · ok HTTP/1.1 200 2093 ms crawled 2026-05-19

US · 104.21.23.39 · AS13335 Cloudflare, Inc.

Reputation 100/100

sector tech type landing page

HTML metadata

Title: Alliance | Crypto & AI Accelerator
Description: We help crypto & AI startups reach escape velocity. $500k funding. Demo Day in NYC. Interview invites sent within 1 week. Apply in under 20 minutes.
Language: en
Canonical: https://alliance.xyz

Open Graph

url: https://alliance.xyz
title: Alliance | Crypto & AI Accelerator
site name: Alliance
description: We help crypto & AI startups reach escape velocity. $500k funding. Demo Day in NYC. Interview invites sent within 1 week. Apply in under 20 minutes.

Technology

CDN: Cloudflare
CMS: Next.js

Third-party hosts loaded (3)

images.prismic.io×32
pbs.twimg.com×12
img.youtube.com×2

Social

Registration

Registrar

Go Daddy, LLC

Created

2018-12-16

Expires

2026-12-16 209 days left

Updated

2026-02-20

Name servers

wilson.ns.cloudflare.com
zita.ns.cloudflare.com

DNS records live

NS

wilson.ns.cloudflare.com
zita.ns.cloudflare.com

MX

1 aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

linkedin-site-verification=de6643c1-6302-430d-9dfd-08101a21c023
tiktok-developers-site-verification=ndkRmcNq7lWuh32Ia5Fa0nr2lgnCRjPc

Verified for

Apple
Google

Email authentication strong

SPF

v=spf1 -all

strict (-all)

DMARC

v=DMARC1; p=reject; sp=reject; adkim=s; aspf=s;

policy: reject (enforced) · sp=reject

DKIM

Show 12 DKIM selectors

default: v=DKIM1; p=
google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKdH4QUiIBujaCEhaJ7H+nkg5hOEI2KSqrukbFQBWzGzah1L5UspsUFjBqv/u5cWWV3MkEhcXJS1LQ…
selector1: v=DKIM1; p=
selector2: v=DKIM1; p=
k1: v=DKIM1; p=
k2: v=DKIM1; p=
mail: v=DKIM1; p=
dkim: v=DKIM1; p=
s1: v=DKIM1; p=
s2: v=DKIM1; p=
mxvault: v=DKIM1; p=
smtpapi: v=DKIM1; p=

selectors probed

Certificate (current)

WE1

from 2026-04-09 to 2026-07-08

Expires in 49 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://alliance.xyz/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: geolocation=(), microphone=(), camera=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://app.posthog.com https://us.i.posthog.com https://us-assets.i.posthog.com https://static.ads-twitter.com https://platform.twitter.com https://platform.x.com https://www.youtube.com https://static.cdn.prismic.io https://static.cloudflareinsights.com https://js.hsforms.net https://js.hs-scripts.com https://js.hs-banner.com https://js.hs-analytics.net https://js.hscollectedforms.net https://www.google.com https://www.gstatic.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https: http:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://app.posthog.com https://us.i.posthog.com https://us-assets.i.posthog.com https://*.prismic.io wss://*.prismic.io https://*.hsforms.net https://*.hsforms.com https://*.hubspot.com https://*.hs-analytics.net https://*.hscollectedforms.net https://hubspot-forms-static-embed.s3.amazonaws.com; frame-src 'self' https://platform.twitter.com https:/
strict-transport-security: max-age=31536000; includeSubDomains