Automatic security check · Public OSINT only
Company website
stripe.com security check
Public OSINT valuation for stripe.com: grade A (88/100). Title signal “Online-Bezahldienst und Zahlungsdienstleister | Stripe”. 6 security headers present, 2 commonly expected headers missing. This is a defensive surface review — not a penetration test.
88
/100
Grade A
- High concern
- Elevated risk
- Caution advised
- Trusted — verify
- Strong protections
Company website · Services · Social
Company website
Services & products
Links are extracted from public crawl HTML only. We never invent profiles or product pages.
How we scored stripe.com
Positive signals
- TLS handshake OK (TLSv1.3).
- HTTP Strict Transport Security is present.
- Content-Security-Policy observed.
- DNS resolves publicly (A/AAAA).
- security.txt found (coordinated disclosure signal).
- robots.txt is publicly available.
- RDAP domain record available (stripe.com).
Risk signals
- No elevated risk signals recorded in this pass.
Findings
- TLS handshake OK (TLSv1.3).
- HTTP Strict Transport Security is present.
- Content-Security-Policy observed.
- DNS resolves publicly (A/AAAA).
- security.txt found (coordinated disclosure signal).
- robots.txt is publicly available.
- RDAP domain record available (stripe.com).
- Final HTTP status 200 at https://stripe.com/de.
Technical details
DNS
resolved- A
- 54.76.53.164, 52.215.231.162, 34.252.74.21
- AAAA
- —
- PTR
- ec2-54-76-53-164.eu-west-1.compute.amazonaws.com
- error
- —
TLS / certificate
ok- version
- TLSv1.3
- cipher
- TLS_AES_256_GCM_SHA384
- issuer
- DigiCert, Inc.
- notAfter
- May 9 23:59:59 2027 GMT
- SAN sample
- stripe.com, www.stripe.com
- error
- —
HTTP & security headers
6 present- finalUrl
- https://stripe.com/de
- status
- 200
- server
- nginx
- x-powered-by
- —
- present
- content-security-policy, cross-origin-opener-policy, referrer-policy, strict-transport-security, x-content-type-options, x-frame-options
- missing
- permissions-policy, cross-origin-resource-policy
- cookie Secure
- False
- cookie HttpOnly
- False
Tech fingerprint (public)
passive- title
- Online-Bezahldienst und Zahlungsdienstleister | Stripe
- generator
- —
- tech
- Next.js
- script hosts
- b.stripecdn.com
- description
- Stripe ist eine Finanzdienstleistungsplattform, die Unternehmen jeder Art hilft, Zahlungen zu akzeptieren, flexible Abrechnungsmodelle zu erstellen und Geldbewegungen zu verwalten.
RDAP / registration
rdap- domain
- stripe.com
- registrar
- SafeNames Ltd.
- created
- 1995-09-12T04:00:00Z
- expires
- 2027-09-11T04:00:00Z
- nameservers
- ns-1087.awsdns-07.org, ns-1882.awsdns-43.co.uk, ns-423.awsdns-52.com, ns-705.awsdns-24.net
- status
- client delete prohibited, client transfer prohibited, client update prohibited, server delete prohibited, server transfer prohibited, server update prohibited
- error
- —
Public well-known
passive- /.well-known/security.txt
- HTTP 200 · found
- /robots.txt
- HTTP 200 · found
- /security.txt
- HTTP 404