statof.com

Live preview

This site sends "X-Frame-Options: ALLOWALL", which blocks embedding it here.

Since statof.com can't be embedded live, this is a captured screenshot instead — a snapshot from whenever it was last rendered, not necessarily this exact moment.

HTTP & security headers

Response

Server

cloudflare

Content-Type

text/html; charset=utf-8

Cache-Control

s-maxage=31536000

Content-Encoding

Not sent

Security

Content-Security-Policy

default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googletagmanager.com https://*.clerk.accounts.dev https://*.clerk.com https://*.statof.com https://challenges.cloudflare.com https://platform.twitter.com https://r.wdfl.co https://*.getrewardful.com https://connect.facebook.net; style-src 'self' 'unsafe-inline' https://cdn.web-fonts.ge https://platform.twitter.com; img-src 'self' https://cdn-icons-png.flaticon.com https://img.clerk.com https://*.google-analytics.com https://*.googletagmanager.com https://pbs.twimg.com https://abs.twimg.com https://www.facebook.com data:; font-src 'self' https://fonts.gstatic.com https://cdn.web-fonts.ge; connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.clerk.accounts.dev https://*.clerk.com https://*.statof.com https://challenges.cloudflare.com https://syndication.twitter.com https://cdn.syndication.twimg.com https://platform.twitter.com https://r.wdfl.co https://*.getrewardful.com https://*.wdfl.co https://connect.facebook.net https://www.facebook.com; worker-src 'self' blob: https://*.clerk.accounts.dev https://*.statof.com; frame-src 'self' https://*.clerk.accounts.dev https://*.clerk.com https://*.statof.com https://challenges.cloudflare.com https://platform.twitter.com https://syndication.twitter.com https://cdn.syndication.twimg.com; frame-ancestors * chrome-extension:

Strict-Transport-Security

max-age=31536000; includeSubDomains

X-Frame-Options

ALLOWALL

X-Content-Type-Options

nosniff

Referrer-Policy

strict-origin-when-cross-origin

Permissions-Policy

camera=(), microphone=(), geolocation=()

What each security header does

Redirect chain

1. 1.http://statof.com/HTTP 308

   → https://statof.com/

2. 2.https://statof.com/HTTP 200

Meta tags

Title

Statof — Football Stats: Corners, Cards, Throw-ins, xG & Referees (390+ Leagues)

Description

Corner stats, throw-in stats, cards, fouls, xG and referee data for 390+ leagues — team rankings, match previews and daily trends, built for people who look at the numbers.

Canonical

https://statof.com

Robots

index, follow

Generator

Not set

Open Graph title

Statof — Advanced Football Statistics

Open Graph description

In-depth football statistics, head-to-head records, form guides, live scores, and match analysis for every league.

Open Graph image

https://statof.com/og-statof.png

Open Graph type

website

Twitter card

summary_large_image

Twitter title

Statof — Advanced Football Statistics

Twitter image

https://statof.com/og-statof.png

robots.txt

Disallow rules (User-agent: *)

3

Disallow rules (other agents)

68

Technology detected

Best-effort, based on a small set of well-known signals — this may be incomplete.

• Cloudflarecdn

  Server: cloudflare

• Next.jsframework

  X-Powered-By: Next.js

• Google Analyticsanalytics

  Found "googletagmanager.com/gtag/js" in the page's HTML

Related domains