Audit: stripe.com

Audited on 3 Sep 2026

75
overall score
On-page SEO
0
Crawlability
83
TLS & security
100
Network
83
Email
100
DNS
83

The site is up · responded in 302 ms

  • Reachable 1% of the last 24 hours
  • Outages cost you traffic and rankings while they last, and they rarely happen while you are watching.

On-page SEO

0/100
  • ? Page indexing The page was not fetched
  • ? On-page markup The page was not fetched

Crawlability

83/100
  • robots.txt present + valid Parsed cleanly · 1 sitemap(s) declared
  • ! Sitemap.xml present No /sitemap.xml at this host

TLS & security

100/100
  • TLS handshake succeeds
  • Certificate not expiring soon 52 days left

Network

83/100
  • Hostname resolves to an A record 198.137.150.41
  • ! Server header does not leak version

Email

100/100
  • MX records valid + reachable
  • SPF record present v=spf1 ip4:198.2.180.60/32 ip4:13.111.2.227/32 include:spf1.stripe.com include:greenhouse-outbound-mail.stripe.com include:_spf.qualtrics.com ~all
  • DMARC record present
  • DMARC policy enforced p=reject
  • DKIM key published selector=google, ~1296-bit

DNS

83/100
  • A records resolve
  • NS records present
  • MX records present
  • DNS resolvers agree on the same A record 30% of 12 resolvers agree
  • Domain registration not expiring soon 355 days left
  • Domain is established 30y 11m 20d (1995-09-12)

What changed

Nothing has changed on stripe.com since we started watching it.

Certificates expire, DNS gets edited, a header goes missing in a deploy. Prove the domain is yours and we watch it on a schedule — free — and email you the moment something moves, so you hear it from us instead of from a customer.

Subdomains discovered 🔒 Pro

191 via Certificate Transparency

We found 191 subdomains for stripe.com via Certificate Transparency logs.

Unlock the subdomain list

  • See every subdomain discovered via crt.sh CT logs
  • Click any subdomain to audit it (separate report)
  • Useful for security recon + asset inventory

Tech stack detected

3 technologies · Pro: track changes over time →

Signature-based identification from the public homepage. Pattern set is fixed; nothing is sent to third parties.

Framework

  • Next.js

Ecommerce

  • WooCommerce

Server

  • Header value nginx

A certificate that expires on Tuesday should not wait until Friday. Prove a domain is yours and we check it free, once a week, emailing you anything that changed. Pro checks it once a day, looks at every host on the domain, and keeps 365 days of history — so you hear about a problem in hours rather than days.

Compare plans →