HTTP Headers Analysis for https://stripe.network

Detected Technologies from Headers

See all in URL Inspect 4

AWS

Contentful

Nginx

Stripe

HTTP Security Headers

Status

Strict-Transport-Security

Excellent

max-age=63072000; includeSubDomains; preload

Content-Security-Policy

Good

base-uri; child-src; connect-src; +15 more Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Good

no-referrer-when-downgrade

Permissions-Policy

Missing

Not configured

Recommendations

• Strengthen CSP by removing 'unsafe-eval'
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

connection: close

Caching Headers

No caching headers found

Content Headers

Content-Length

Content

607027

Content-Type

Content

text/html; charset=utf-8

content-length: 607027
content-type: text/html; charset=utf-8

Server Headers

Server

nginx

server: nginx

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: cid=dcd9486d-0c95-5b50-a1d0-0f597c4b6a83; Path=/; Domain=stripe.com; Max-Age=7776000; Secure; SameSite=Lax

Other Headers

Cross-Origin-Opener-Policy-Report-Only

Other

same-origin-allow-popups; report-to="wsp_coop"

Date

Other

Wed, 29 Jul 2026 14:46:27 GMT

Report-To

Other

Group coop max-age: 2h

Endpoint 1 https://q.stripe.com/coop-report

Group wsp_coop max-age: 2h

Endpoint 1 https://q.stripe.com/coop-report?s=cywa9Kz_MqO4X78hu-f5XC9vnAXx2ZN-sEgjMdWx6zZFx7A_K7MwdctDFDgWUes=

Group wsp_coep max-age: 2h

Endpoint 1 https://q.stripe.com/coep-report?s=cywa9Kz_MqO4X78hu-f5XC9vnAXx2ZN-sEgjMdWx6zZFx7A_K7MwdctDFDgWUes=

Group csp max-age: 2h

Endpoint 1 https://q.stripe.com/csp-report-v2?q=cywa9Kz_MqO4X78hu-f5XC9vnAXx2ZN-sEgjMdWx6zZFx7A_K7MwdctDFDgWUes%3D&t=1

Reporting-Endpoints

Other

coop="https://q.stripe.com/coop-report", wsp_coop="https://q.stripe.com/coop-report?s=cywa9Kz_MqO4X78hu-f5XC9vnAXx2ZN-sEgjMdWx6zZFx7A_K7MwdctDFDgWUes=", wsp_coep="https://q.stripe.com/coep-report?s=cywa9Kz_MqO4X78hu-f5XC9vnAXx2ZN-sEgjMdWx6zZFx7A_K7MwdctDFDgWUes=", csp="https://q.stripe.com/csp-report-v2?q=cywa9Kz_MqO4X78hu-f5XC9vnAXx2ZN-sEgjMdWx6zZFx7A_K7MwdctDFDgWUes%3D&t=1"

X-Mkt-Cache

Other

HIT

X-Stripe-Proxy-Response

Other

upstream

X-Stripe-Server-Rpc-Duration-Micros

Other

57691

X-Wc

Other

3ff

cross-origin-opener-policy-report-only: same-origin-allow-popups; report-to="wsp_coop"
date: Wed, 29 Jul 2026 14:46:27 GMT
report-to: {"group":"coop","max_age":8640,"endpoints":[{"url":"https://q.stripe.com/coop-report"}],"include_subdomains":true}, {"group":"wsp_coop","max_age":8640,"endpoints":[{"url":"https://q.stripe.com/coop-report?s=cywa9Kz_MqO4X78hu-f5XC9vnAXx2ZN-sEgjMdWx6zZFx7A_K7MwdctDFDgWUes="}],"include_subdomains":true}, {"group":"wsp_coep","max_age":8640,"endpoints":[{"url":"https://q.stripe.com/coep-report?s=cywa9Kz_MqO4X78hu-f5XC9vnAXx2ZN-sEgjMdWx6zZFx7A_K7MwdctDFDgWUes="}],"include_subdomains":true}, {"group":"csp","max_age":8640,"endpoints":[{"url":"https://q.stripe.com/csp-report-v2?q=cywa9Kz_MqO4X78hu-f5XC9vnAXx2ZN-sEgjMdWx6zZFx7A_K7MwdctDFDgWUes%3D&t=1"}],"include_subdomains":true}
reporting-endpoints: coop="https://q.stripe.com/coop-report", wsp_coop="https://q.stripe.com/coop-report?s=cywa9Kz_MqO4X78hu-f5XC9vnAXx2ZN-sEgjMdWx6zZFx7A_K7MwdctDFDgWUes=", wsp_coep="https://q.stripe.com/coep-report?s=cywa9Kz_MqO4X78hu-f5XC9vnAXx2ZN-sEgjMdWx6zZFx7A_K7MwdctDFDgWUes=", csp="https://q.stripe.com/csp-report-v2?q=cywa9Kz_MqO4X78hu-f5XC9vnAXx2ZN-sEgjMdWx6zZFx7A_K7MwdctDFDgWUes%3D&t=1"
x-mkt-cache: HIT
x-stripe-proxy-response: upstream
x-stripe-server-rpc-duration-micros: 57691
x-wc: 3ff

Recommendations

Enable compression (gzip/brotli) to improve performance

Add Cache-Control header to optimize caching