| Site title | Not Present |
|---|---|
| Site rank | 73 |
| Description | Not Present |
| Date first seen | June 2017 |
|---|---|
| Netcraft Risk Rating | 0/10 |
| Primary language | English |
| Site | https://m.stripe.network |
|---|---|
| Netblock Owner | Fastly |
| Domain | stripe.network |
| Nameserver | ns-423.awsdns-52.com |
| IP address | 199.232.24.176 (VirusTotal) |
| DNS admin | awsdns-hostmaster@amazon.com |
| IPv6 address | Not Present |
| Reverse DNS | unknown |
| Domain registrar | donuts.co |
|---|---|
| Nameserver organisation | whois.markmonitor.com |
| Organisation | Stripe, Redacted For Privacy, Redacted For Privacy, REDACTED FOR PRIVACY, United States |
| Hosting company | unknown |
| Top Level Domain | Network (.network) |
| DNS Security Extensions | unknown |
| Hosting country | US |
| IP range | Country | Name | Description |
|---|---|---|---|
| 0.0.0.0-255.255.255.255 | N/A | IANA-BLK | The whole IPv4 address space |
| ↳ 199.0.0.0-199.255.255.255 | United States | NET199 | American Registry for Internet Numbers |
| ↳ 199.232.0.0-199.232.255.255 | United States | SKYCA-3 | Fastly |
| ↳ 199.232.24.176 | United States | SKYCA-3 | Fastly |
Note: Uptime - the time since last reboot is explained in the FAQ
| Plotted Value | No. samples | Max | Latest |
|---|---|---|---|
| Linux | 9 | 107.82 | 1.95 |
| 77-day Moving average | 78 | 73.98 | 71.41 |
| Assurance | Extended validation |
|---|---|
| Common name | a.stripecdn.com |
| Organisation | Stripe, Inc |
| State | California |
| Country | US |
| Organisational unit | Not Present |
| Subject Alternative Name | stripecdn.com, stripe.network, a.stripecdn.com, b.stripecdn.com, c.stripecdn.com, d.stripecdn.com, js.stripe.com, edge-js.stripe.com, checkout.stripe.com, edge-checkout.stripe.com, m.stripe.network, edge-m.stripe.network |
| Validity period | From Feb 12 2020 to Jun 3 2020 (3 months, 2 weeks, 6 days) |
| Matches hostname | Yes |
| Server | Varnish |
| Public key algorithm | rsaEncryption |
| Protocol version | TLSv1.2 |
| Public key length | 2048 |
| Certificate check | ok |
| Signature algorithm | sha256WithRSAEncryption |
| Serial number | 0x0b284f7737b79d10333f4f0d2e63eb50 |
| Cipher | ECDHE-RSA-AES128-GCM-SHA256 |
| Version number | 0x02 |
| Perfect Forward Secrecy | Yes |
|---|---|
| Next Protocol Negotiation | Not Present |
| Supported TLS Extensions | RFC5746 renegotiation info, RFC4366 server name, RFC4492 EC point formats, RFC5077 session ticket, RFC4366 status request, unknown |
| Issuing organisation | DigiCert Inc |
| Issuer common name | DigiCert SHA2 Extended Validation Server CA |
| Issuer unit | www.digicert.com |
| Issuer location | Not Present |
| Issuer country | US |
| Issuer state | Not Present |
| Certificate Revocation Lists |
http://crl3.digicert.com/sha2-ev-server-g2.crl http://crl4.digicert.com/sha2-ev-server-g2.crl |
| Certificate Hash | kINiyr0hsWkZJIMdhIkPIXq9Bm0 |
| Public Key Hash | 03239c6aaa43276d02476c3644ac35f59288578d5fcee5744cabac2bfb79cc11 |
| OCSP servers | http://ocsp.digicert.com - 100% uptime in the past 24 hours |
| OCSP stapling response | Certificate valid |
| OCSP data generated | Apr 7 21:57:14 2020 GMT |
| OCSP data expires | Apr 14 21:12:14 2020 GMT |
Signed Certificate Timestamps (SCTs)
| Source | Log | Timestamp | Signature Verification |
|---|---|---|---|
| Certificate | Google Skydiver u9nfvB+KcbWTlCOXqpJ7RzhXlQqrUugakJZkNo4e0YU= |
2020-02-12 23:53:07 | Success |
| Certificate | DigiCert 1 VhQGmi/XwuzT9eG9RLI+x0Z2ubyZEVzA75SYVdaJ0N0= |
2020-02-12 23:53:07 | Success |
Google EV whitelist
Certificate is not in Google's EV whitelist.
SSLv3/POODLE
This site does not support the SSL version 3 protocol.
More information about SSL version 3 and the POODLE vulnerability.
Heartbleed
The site did not offer the Heartbeat TLS extension prior to the Heartbleed disclosure, and so was not exploitable.
This test does not exploit the Heartbleed vulnerability but uses information from conventional HTTPS requests. More information about Heartbleed detection.
| Common name | DigiCert High Assurance EV Root CA |
|---|---|
| Organisational unit | www.digicert.com |
| Organisation | DigiCert Inc |
| Validity period | From 2006-11-10 to 2031-11-10 |
| Common name | DigiCert SHA2 Extended Validation Server CA |
|---|---|
| Organisational unit | www.digicert.com |
| Organisation | DigiCert Inc |
| Validity period | From 2013-10-22 to 2028-10-22 |
| Netblock owner | IP address | OS | Web server | Last seen |
|---|---|---|---|---|
| Fastly PO Box 78266 San Francisco CA US 94107 | 151.101.16.176 | Linux | nginx | 6-Apr-2020 |
| Fastly PO Box 78266 San Francisco CA US 94107 | 199.232.56.176 | Linux | nginx | 24-Feb-2020 |
| Fastly PO Box 78266 San Francisco CA US 94107 | 151.101.16.176 | Linux | nginx | 7-Feb-2020 |
| Fastly PO Box 78266 San Francisco CA US 94107 | 151.101.60.176 | Linux | nginx | 25-Jan-2020 |
| Fastly PO Box 78266 San Francisco CA US 94107 | 151.101.16.176 | Linux | nginx | 17-Jan-2020 |
| Fastly PO Box 78266 San Francisco CA US 94107 | 151.101.60.176 | Linux | nginx | 24-Jun-2017 |
A host's Sender Policy Framework (SPF) describes who can send mail on its behalf. This is done by publishing an SPF record containing a series of rules. Each rule consists of a qualifier followed by a specification of which domains to apply this qualifier to. For more information please see open-spf.org.
Warning: It appears that this host does not have an SPF record. There may be an SPF record on stripe.network: Check the site report.
Setting up an SPF record helps prevent the delivery of forged emails from your domain. Please note that an SPF record will only protect the domain it is added to and not any mail-enabled subdomains. It is recommended to add an SPF record to any subdomain with an MX record.
DMARC (Domain-based Message Authentication, Reporting and Conformance) is a mechanism for domain owners to indicate how mail purporting to originate from their domain should be authenticated. It builds on SPF and DKIM, providing a method to set policy and to give reporting of failures. For more information please see dmarc.org.
This host does not have a DMARC record. There may be a DMARC record on the site report for stripe.network: Check the site report.
Web Trackers are third-party resources loaded onto a webpage. Trackable resources include social sharing widgets, javascript files, and images. These trackers can be used to monitor individual user behaviour across the web. Data derived from these trackers are primarily used for advertising or analytics purposes.
No known trackers were identified.
-
A web accelerator is a proxy server that reduces web site access times.
Technology Description Popular sites using this technology Varnish An HTTP accelerator for web applications www.20minutes.fr, www.cnn.com, www.bbc.co.uk -
A content delivery network or content distribution network (CDN) is a large distributed system of servers deployed in multiple data centers in the Internet. The goal of a CDN is to serve content to end-users with high availability and high performance.
-
HTTP compression is a capability that can be built into web servers and web clients to make better use of available bandwidth, and provide greater transmission speeds between both.
Technology Description Popular sites using this technology Gzip Content Encoding Gzip HTTP Compression protocol www.mathworks.com, www.tsetmc.com, www.seznam.cz