SAMPLE PROBE · stripe.com

A real care-report shell, filled from a live public probe.

We did one HTTP request, one TLS handshake, one DNS lookup, one www check, and a header sniff against stripe.com and rendered the result through the same shell your agency would use to send its own client's monthly report. No claim is made about stripe.comor its owners — any site on the public internet is eligible for a shell like this. Slots we couldn't measure appear as UNKNOWN, never a guess.

Your agency can send this monthly. Probe your client's domain →← back to the chart

HTTP_STATUS: 200
STACK: Next.js
TLS_DAYS_LEFT: UNKNOWN
FINAL_HOST: stripe.com
GENERATED_UTC: 2026-11-05 15:58

SAMPLE STRIP · stripe.com▸ rendered

Your agency - Website Care Snapshot

Reachability

HTTP200

ResponseUNKNOWN ms

Redirectedno

Certificate

RenewsUNKNOWN

Days LeftUNKNOWN

FlagUNKNOWN

DNS

A Records2A record(s)

wwwresolves

Security headers

strict-transport-securityPRESENTmax-age=63072000; includeSubDomains; preload

content-security-policyPRESENTbase-uri 'none'; child-src 'none'; connect-src https://c.increment.com https://c.stripe.dev https://c.stripe.global https://c.stripe.partners blob: https://b.stripecdn.com https://errors.stripe.com https://ext.stripe.com https://r.stripe.com https://stripe-images.s3.us-west-1.amazonaws.com https://stripe.com 'self'; default-src 'none'; font-src https://b.stripecdn.com 'self'; form-action https://stripe.com 'self'; frame-ancestors https://app.contentful.com 'self'; frame-src https://b.stripecdn.com https://js.stripe.com https://support-conversations.stripe.com 'self'; img-src data: https://assets.ctfassets.net https://assets.stripeassets.com https://b.stripecdn.com https://images.ctfassets.net https://images.stripeassets.com https://q.stripe.com 'self'; manifest-src 'none'; media-src https://assets.ctfassets.net https://assets.stripeassets.com https://b.stripecdn.com https://videos.ctfassets.net https://videos.stripeassets.com 'self'; object-src 'none'; script-src https://b.stripecdn.com https://js.stripe.com 'self' 'sha256-3aWvb9tRBjmz1OjR3n7mwiTm94+s4iki4mMZF82asmc=' 'sha256-5LtzXhT7UFn+GqP5pKEMGL08UNZsrzANHFEBW/mQHGw=' 'sha256-beLzNcen8LrazzSCRjAapoIMTgJI0osPWGNSX7aK6lc=' 'sha256-cCM0Z4lzGkzQnmbdVw+ouz0JRawyaKcZ4yiqzqYS7ek=' 'sha256-vTifGUJH6hJYTvstw4xJ4xfr/vE0ELkOV4GpCumyqfg=' 'sha256-KxhSaxKB5RFTQsqfRwp+zG7iLjvMrTAySqnSvWlqct0=' 'sha256-tMuJ8c00j54yuxogrdIJeGhNVB350dc56i969XRz/Mc=' 'sha256-aEFSvCaVnb2wNwuO3IzA8J44RdTKt6vms9beA7BcCYg=' 'sha256-0SWEc2BfR2o77i2vUiNNIrFKQkjc2Ujsr2hlfZ6oUek=' 'report-sample'; style-src https://b.stripecdn.com 'self' 'unsafe-inline'; worker-src https://b.stripecdn.com 'self'; upgrade-insecure-requests; report-uri https://q.stripe.com/csp-violation?q=VXBy1zuyAmg3QpyqhiIMr2_VFYexkXifO0WJTQkixJQSDdW7aDKWcDWctzIgqRc%3D; report-to csp

x-frame-optionsPRESENTSAMEORIGIN

Hardening opportunities: x-content-type-options not nosniff, referrer-policy MISSING

Stack

Next.js

HONESTY · WHAT THIS PAGE IS NOT

What we are not saying.

We are not auditing stripe.comor its owners. The numbers above come from one public probe of the apex — that's all.
We are not claiming any relationship between FleetOpus and stripe.com. Any site on the public internet will yield a shell like this.
A result of UNKNOWNmeans the probe could not measure it from our vantage point — not that the property is broken or absent.
The shell is a draft of what your agency's report could look like. Your agency writes the report; your client can verify it.