coinbase.com
Paid content
Multilingual
Categories: Finance
Coinbase is a secure online platform for buying, selling, transferring, and storing cryptocurrency.
Related questions
More questions →What is coinbase.com?
Does coinbase.com offer paid content?
What languages does coinbase.com support?
How can I visit coinbase.com?
What are some alternatives to coinbase.com?
Website Overview
The available information shows a mix of normal operation and configuration gaps. Depending on how the website is used, these gaps may affect secure access or the consistency of its public presentation.
Domain and Registration
Unknown
DNS and Email
Unknown
TLS and Certificates
Unknown
HTTP and Browser Security
The response lacks these common security headers: Permissions-Policy. Debug-related headers are present: trace-id. Check whether they are needed in production. No X-Powered-By header was found, reducing one common source of backend fingerprinting information. The cf-ray response header indicates a CDN or caching proxy in the delivery path. The Server header identifies cloudflare without an exact version.
Technology Stack Analysis
Unknown
Search and Social Sharing
Unknown
Hosting and Email
Pages, Search and Sharing
Unknown
Registration details RDAP / WHOIS
Unknown
DNS records
Unknown
TLS and certificates
Unknown
HTTP response headers
| Header | Value |
|---|---|
| content-type | text/html; charset=utf-8 |
| cache-control | no-store, no-cache, must-revalidate, max-age=0, proxy-revalidate |
| server | cloudflare |
| strict-transport-security | max-age=31536000; includeSubDomains; preload |
| content-security-policy | default-src 'self' https://*.coinbase.com https://sdk.onfido.com https://assets.onfido.com https://*.withpersona.com; child-src 'self' https://*.coinbase.com https://accounts.google.com/ https://www.googletagmanager.com/ https://paywithmybank.com/start/ https://cdn1.paywithmybank.com/frontend/build/index.html https://fast.wistia.net https://ui.solaris-p.finleap.cloud https://fts-payment-initiation-wizard.solarisbank.de/ https://payment.truelayer.com https://*.sardine.ai https://sdk.onfido.com/ https://*.cb-device-intelligence.com https://*.wpstn.com https://platform.twitter.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://recaptcha.net https://www.recaptcha.net https://cdn.plaid.com/link/ https://*.doubleclick.net/ blob: https://www.youtube.com https://player.vimeo.com/video/ https://datawrapper.dwcdn.net/ https://widgets.marqeta.com https://*.paypal.com https://pay.google.com/ https://transact.atomicfi.com/ https://centinelapi.cardinalcommerce.com/V1/Cruise/Collect https://p2a.co/ https://docs.google.com/forms/ https://a.sprig.com/SmJKcmh5cDRYZX5zaWQ6YWE3ZDJhZjYtMjYxYS00NjkwLWE3ZWMtMGRjMGQyMGY2ZDk5 https://calendly.com/ https://link.tink.com/ https://jsv3.recruitics.com/ https://js.stripe.com/ https://*.withpersona.com https://embedded.cardless.com/; connect-src 'self' https://browser-intake-datadoghq.com/ https://accounts.google.com/gsi/ https://*.coinbase.com wss://*.coinbase.com https://www.tradingview.com/snapshot/ https://beacon.riskified.com https://c.riskified.com https://player.vimeo.com/api/player.js https://api.web3modal.org https://d1dwhf283nul1c.cloudfront.net/ https://cdnjs.cloudflare.com/ https://analytics.google.com https://*.google-analytics.com https://maps.googleapis.com https://www.googletagmanager.com/gtag/js https://www.googletagmanager.com/gtm.js https://www.googleadservices.com https://googleads.g.doubleclick.net https://*.braintree-api.com https://api.braintreegateway.com https://cdn.contentful.com/ https://api.userleap.com/ https://api.sprig.com/ https://widgets.marqeta.com/client/api/v1/ https://assets.ctfassets.net/ https://images.ctfassets.net/ https://pay.google.com/ https://google.com/pay https://c.tvpixel.com/ https://p.tvpixel.com/ https://*.salesforce.com https://pulse.walletconnect.org https://verify.walletconnect.org https://mempool.space wss://relay.walletconnect.com wss://relay.walletconnect.org https://rpc.walletconnect.org https://explorer-api.walletconnect.com wss://www.walletlink.org https://metamask-sdk.api.cx.metamask.io/evt https://api.onfido.com wss://sync.onfido.com https://sdk.onfido.com/ https://cdn.sprig.com/session-replay/ https://www.google.com/pay https://api2.branch.io https://pixel-config.reddit.com/pixels/a2_gn0ni8qm85z4/config https://www.redditstatic.com/ads/conversions-config/v1/pixel/config/a2_gn0ni8qm85z4_telemetry https://conversions-config.reddit.com/v1/pixel/error https://px.ads.linkedin.com/attribution_trigger https://www.google.com/ccm/collect https://px.ads.linkedin.com/wa/ https://cdn.cookielaw.org/ https://geolocation.onetrust.com/ https://privacyportal.onetrust.com/ https://consent-api.onetrust.com/ https://*.withpersona.com https://inquiry.withpersona.com https://wa.appsflyer.com https://websdk.appsflyer.com https://api-secure.amplitude.com https://sr-client-cfg.amplitude.com https://api-sr.amplitude.com https://api.amplitude.com/ https://rba-authed-278491357830-production.s3.us-east-1.amazonaws.com wss://www.deribit.com https://history.deribit.com https://www.deribit.com https://metrics.deribit.com https://data.deribit.com; font-src * data: blob:; img-src * data: blob:; media-src * data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.coinbase.com https://www.googletagmanager.com/ https://accounts.google.com/gsi/client https://accounts.google.com/gsi/ https://*.sardine.ai https://beacon.riskified.com https://*.cb-device-intelligence.com https://player.vimeo.com/api/player.js https://sdk.onfido.com/ https://w |
| x-frame-options | SAMEORIGIN |
| x-content-type-options | nosniff |
| referrer-policy | strict-origin-when-cross-origin |
| set-cookie | Redacted |
Identified technologies
Technology stack: Unknown
Recent Updates
- HTTP Response Information
- Website profile
- Website Description
- Website Name
- Website profile
- Website Description
- Website Name
User reviews (0)