poap.xyz

.xyz crawl

First seen 2026-04-12 · Last seen 2026-05-20 · ok HTTP/1.1 200 2010 ms crawled 2026-05-20

US · 104.26.1.203 · AS13335 Cloudflare, Inc.

Reputation 100/100

sector tech type homepage

HTML metadata

Title: Welcome to POAP
Description: POAP are the bookmarks for your life. Mint the most important memories of your life as digital collectibles (NFTs) forever on the blockchain.
Language: en

Open Graph

url: https://poap.xyz
title: Welcome to POAP
description: POAP are the bookmarks for your life. Mint the most important memories of your life as digital collectibles (NFTs) forever on the blockchain.

Technology

CDN: Cloudflare
CMS: Next.js

Analytics

Cloudflare Insights

Third-party hosts loaded (2)

lqwa3qcuyuliiaeu.public.blob.vercel-storage.com×26
static.cloudflareinsights.com×1

Social

Registration

Registrar

Gandi SAS

Created

2019-02-15

Expires

2030-02-15 1366 days left

Updated

2026-02-24

Name servers

adel.ns.cloudflare.com
ernest.ns.cloudflare.com

DNS records live

NS

adel.ns.cloudflare.com
ernest.ns.cloudflare.com

MX

10 spool.mail.gandi.net
50 fb.mail.gandi.net

TXT

Show 10 TXT records

22e04ef5-9731-47e4-b783-4ca06ee529ed=9d7b91895c74f336b77b74b0e9a8858c636fcea6c9dea41af27aca586466f11c
f07ca378-f7e9-40f0-b20f-018418138936=47d6c07876da490f659715619eb1d7ed3ced46ec735d96486d9483ea5da1d1ef
f8cdb22b-55eb-49e4-acff-027b5a3090d6=47d6c07876da490f659715619eb1d7ed3ced46ec735d96486d9483ea5da1d1ef
f5305d96-24b1-47cf-b6f6-74068b25e4da=47d6c07876da490f659715619eb1d7ed3ced46ec735d96486d9483ea5da1d1ef
wallet-connect-dns-verification=47d6c07876da490f659715619eb1d7ed3ced46ec735d96486d9483ea5da1d1ef
9a7fa7fb-8bbb-41b6-9064-2a76fca48968=47d6c07876da490f659715619eb1d7ed3ced46ec735d96486d9483ea5da1d1ef
40ff80fb-58ef-41ec-83ba-feb965713ad6=47d6c07876da490f659715619eb1d7ed3ced46ec735d96486d9483ea5da1d1ef
f07ca378-f7e9-40f0-b20f-018418138936=4a8f4a3cfb6bfc731d9bb823e6a623b4b7e2fc8afbabcab17bbaceda1912b22e
0c0cd973-2a31-469d-854e-d905449b998e=47d6c07876da490f659715619eb1d7ed3ced46ec735d96486d9483ea5da1d1ef
d724dd38-d4da-4bf2-857d-2066ba85ce7b=47d6c07876da490f659715619eb1d7ed3ced46ec735d96486d9483ea5da1d1ef

Verified for

Google

Email authentication strong

SPF

v=spf1 include:_mailcust.gandi.net include:amazonses.com ~all

softfail (~all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:dmarc@poap.io

policy: quarantine

DKIM

s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6qbB1KvyzFeXzOER75ZsFvaB//tUXGsZEABtUkSrzOI/xbhNb1zSD0IM07afabf0btw8N+DOXV5FXy9zF…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzuaWIFXdYAaR+zjCbBuOF5TNP6n9x31LeLir6rZD1MGeMiZQz82S7FTG+6Jp/Xc5Kcm+x+WPVDXjc57eB…

selectors probed

Certificate (current)

WE1

from 2026-03-30 to 2026-06-28

Expires in 39 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://poap.xyz/

present

strict-transport-security
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

missing Content Security Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=(), interest-cohort=()
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload