Cabbage.app

cache-control: public, max-age=0, must-revalidate
content-type: text/plain
date: Sun, 17 Aug 2025 04:59:09 GMT
location: https://www.cabbage.app/
refresh: 0;url=https://www.cabbage.app/
server: Vercel
strict-transport-security: max-age=63072000
x-vercel-id: fra1::wspr5-1755406749573-a6843a444b2a

HTTP/2 200 
age: 0
cache-control: private, no-cache, no-store, max-age=0, must-revalidate
content-encoding: br
content-security-policy: default-src 'self'; script-src 'self' https://cdn.mxpnl.com https://cdn.amplitude.com https://*.googletagmanager.com https://sdk.plotline.so https://static.ads-twitter.com https://analytics.twitter.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src * 'self' data: blob: https: http:; font-src 'self' data: https://fonts.googleapis.com https://fonts.gstatic.com https://cdn.plotline.so; connect-src 'self' https://api.mixpanel.com https://api2.amplitude.com https://www.googletagmanager.com https://*.googletagmanager.com https://*.google-analytics.com https://www.google-analytics.com https://analytics.twitter.com https://ads-api.twitter.com https://t.co https://*.nftstorage.link https://gateway.pinata.cloud https://arweave.net https://gateway.irys.xyz https://ipfs.io https://static-dev.cabbage.app https://static.cabbage.app https://cf-ipfs.com https://*.mypinata.cloud https://*.autofun.tech https://assets.coingecko.com https://mypinata.cloud https://cdn.dexscreener.com https://metadata.pumployer.fun https://*.cabbage.app wss://*.cabbage.app https://*.privy.io https://*.staderlabs.com https://*.walletconnect.com https://*.helius-rpc.com wss://*.helius-rpc.com wss://bundles.jito.wtf https://apple.com https://www.apple.com https://google.com https://www.google.com https://pay.google.com https://arbitrum-mainnet.rpc.privy.systems https://mainnet.rpc.privy.systems https://polygon-mainnet.rpc.privy.systems https://forno.celo.org https://api.node.glif.io https://api.calibration.node.glif.io https://base-mainnet.rpc.privy.systems https://rpc.mainnet.lukso.network https://rpc.linea.build https://api.avax.network https://rpc.zora.energy https://ethereum-holesky.publicnode.com https://rpc.redstonechain.com https://rpc.garnetchain.com https://optimism-mainnet.rpc.privy.systems https://rpc.garnetchain.com https://api.relay.link https://*.walletconnect.org wss://*.walletconnect.org https://privy.cabbage.app https://*.web3modal.org https://www.googleapis.com https://api.plotline.so https://amsterdam.mainnet.block-engine.jito.wtf https://frankfurt.mainnet.block-engine.jito.wtf https://london.mainnet.block-engine.jito.wtf https://ny.mainnet.block-engine.jito.wtf https://tokyo.mainnet.block-engine.jito.wtf https://slc.mainnet.block-engine.jito.wtf https://mainnet.block-engine.jito.wtf https://o4509281305624576.ingest.de.sentry.io https://*.sentry.io https://*.sentry.com https://fonts.gstatic.com https://fonts.googleapis.com; frame-src 'self' https://*.privy.io https://dexscreener.com https://*.cabbage.app https://www.youtube.com https://app.insightx.network; object-src data:; base-uri 'self'; form-action 'self'; frame-ancestors 'self' https://*.cabbage.app; worker-src 'self' blob:; upgrade-insecure-requests;
content-type: text/html; charset=utf-8
date: Sun, 17 Aug 2025 04:59:09 GMT
link: </_next/static/media/250282a0d398014f-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/95523e6af433889e-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/e4af272ccee01ff0-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", <https://www.cabbage.app/images/logo-symbol.svg>; rel=preload; as="image", </images/landing/hero/hero-fold-bg.webp>; rel=preload; as="image", </images/landing/hero/phone.webp>; rel=preload; as="image"
permissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()
referrer-policy: strict-origin-when-cross-origin
server: Vercel
set-cookie: locale=en; Path=/; Expires=Mon, 17 Aug 2026 04:59:09 GMT; Max-Age=31536000; Secure; SameSite=lax
strict-transport-security: max-age=63072000
vary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Router-Segment-Prefetch
x-content-type-options: nosniff
x-frame-options: DENY
x-locale: en
x-matched-path: /
x-powered-by: Next.js
x-vercel-cache: MISS
x-vercel-id: fra1::iad1::5gjbc-1755406749652-c5f575c43eae
x-xss-protection: 1; mode=block