Website profiles · Technology insights · Alternatives

standardnotes.com Paid content

Categories: Security & Privacy

Standard Notes helps you gain control in a world that often feels out of control. Protect your life's work with end-to-end encryption, advanced security measures, and unmatched privacy controls.

Visit website

Updated: 2026-09-24 20:28 Language: English (default) Access: Normal

Profile views 0 Outbound visits 0
Standard Notes Full homepage screenshot

Related questions

More questions →
What is standardnotes.com?
Standard Notes helps you gain control in a world that often feels out of control. Protect your life's work with end-to-end encryption, advanced security measures, and unmatched privacy controls.
Does standardnotes.com offer paid content?
Paid content or plans are available. Check the website for current prices and included features.
What languages does standardnotes.com support?
Primary language: English.
How can I visit standardnotes.com?
Use the Visit website link to open the website in a new tab.
What are some alternatives to standardnotes.com?
Related websites include werecoverdata.com, watchguard.com, tld-list.com, sucuri.net, speed.cloudflare.com, smailpro.com. Compare their features and pricing for your needs.

Website Overview

An advisory match combined with missing browser safeguards may increase exposure if the affected component is active. Deployment-specific verification and remediation deserve priority. Identifiable technologies and additional version or configuration signals make the service easier to fingerprint, which may help targeted scanners narrow their checks.

Domain and Registration

Registered in 2018, this domain has about 7 years of history. That suggests continuity, although ownership and purpose may have changed. Transfer-protection status is present, helping reduce the risk of unauthorized domain transfers. The domain uses the common .com extension, which is not an independent safety signal.

DNS and Email

Nameservers are provided by Cloudflare, indicating managed DNS hosting. MX records point to the Proton Mail email service. No CNAME was found; the observed records resolve directly to addresses. SPF and DMARC are configured. DKIM status is unknown. TXT records include verification markers for Google. Such markers may also remain after a service stops being used.

TLS and Certificates

The public key uses EC with 256 bits. The server supplied a complete certificate chain. No organization name is present in the certificate; the available fields are consistent with domain validation. The certificate was issued within the Google Trust Services cloud or CDN ecosystem. The certificate's total validity is about 90 days, consistent with a short renewal cycle.

HTTP and Browser Security

The response lacks these common security headers: Permissions-Policy. CORS permits any origin to read this response. This is common for public resources; sensitive responses need narrower handling. No X-Powered-By header was found, reducing one common source of backend fingerprinting information. The cf-ray, x-cache, via response header indicates a CDN or caching proxy in the delivery path. No obvious internal addresses or debug information were found in the headers.

Technology Stack Analysis

The public page identifies Gatsby 5.3.3, Cloudflare, Amazon CloudFront, with exact versions exposed for 1 technologies. These details can narrow vulnerability checks, although exposure alone is not a vulnerability. The advisory source OSV places Gatsby 5.3.3 in the affected range of GHSA-c6f8-8r25-c4gc. Verify the deployed version and relevant configuration before drawing conclusions about exploitability. Updating affected components should be a priority.

Search and Social Sharing

The meta description has 194 characters and may be shortened in search results. The Generator tag identifies Gatsby 5.3.3, making the publishing system easier to fingerprint. Open Graph is partially configured; og:type is missing. Twitter Card metadata is configured. The title has 47 characters, within a common display range.

Hosting and Email

DNSCloudflare
HostingAmazon CloudFront
EmailProton Mail
Location Location unknown 104.20.43.206

User reviews (0)

  • No reviews yet.

Pages, Search and Sharing

Meta descriptionStandard Notes helps you gain control in a world that often feels out of control. Protect your life's work with end-to-end encryption, advanced security measures, and unmatched privacy controls.
Canonical URLhttps://standardnotes.com
LanguageEnglish (default)
Twitter Cardsummary

Social Sharing Preview

8 fields

robots.txt (opens in a new tab)

1 rules
All bots 1 allowed · 0 disallowed
  • Allow/

Sitemaps

1

Registration details RDAP / WHOIS

RegistrarAmazon Registrar, Inc.
Registered2018-12-01
Expires2028-12-01
Domain statusclient transfer prohibited
Nameserversagustin.ns.cloudflare.com、paris.ns.cloudflare.com
DNSSECunsigned

DNS records

TypeNameValueTTLPriority
Astandardnotes.com104.20.43.206300—
Astandardnotes.com172.66.156.195300—
AAAAstandardnotes.com2606:4700:10::6814:2bce300—
AAAAstandardnotes.com2606:4700:10::ac42:9cc3300—
MXstandardnotes.commail.protonmail.ch30010
MXstandardnotes.commailsec.protonmail.ch30020
NSstandardnotes.comagustin.ns.cloudflare.com86400—
NSstandardnotes.comparis.ns.cloudflare.com86400—
TXTstandardnotes.comgoogle-site-verification=e91a-TMiSfxJHxfg5NJzr4AaTEtQ1cKDA_lSysqA84o300—
TXTstandardnotes.comprotonmail-verification=3d6ff14c3a0e34fb5bd14d8f2875dfcb39787164300—
TXTstandardnotes.comsl-verification=gatmfyjptkcqhqjkndlayzursyxioj300—
TXTstandardnotes.comv=spf1 include:_spf.google.com include:amazonses.com include:_spf.protonmail.ch include:mail.zendesk.com -all300—
DMARC_dmarc.standardnotes.comv=DMARC1; p= quarantine;300—

TLS and certificates

AssessmentNormal configuration
Supported protocolsTLSv1.2、TLSv1.3
Negotiated protocolTLSv1.3
Certificate subjectstandardnotes.com
IssuerGoogle Trust Services
Valid until2026-11-29T04:28 · Remaining when checked: 65 days
Verification detailsCertificate trust: Passed · Hostname match: Passed

HTTP response headers

HeaderValue
content-typetext/html
cache-controlpublic, max-age=0, must-revalidate
servercloudflare
strict-transport-securitymax-age=31536000; includeSubDomains; preload
content-security-policydefault-src https: 'self'; base-uri 'self'; block-all-mixed-content; child-src 'self' https://app-demo.standardnotes.com https://extensions.standardnotes.com *.stripe.com donorbox.org/embed/standard-notes paypalobjects.com *.paypal.com; connect-src 'self' *.stripe.com *.paypal.com https://extensions.standardnotes.com https://api.standardnotes.com *.braintreegateway.com *.coinbase.com *.braintree-api.com client-analytics.braintree.com plausible.standardnotes.com; frame-src 'self' *.youtube-nocookie.com *.braintreegateway.com client-analytics.braintree.com *.coinbase.com *.paypal.com www.paypalobjects.com *.stripe.com donorbox.org/embed/standard-notes *.standardnotes.com; font-src 'self'; form-action 'self' *.list-manage.com; frame-ancestors 'self' https://app-demo.standardnotes.com https://extensions.standardnotes.com https://api.standardnotes.com; img-src * data:; manifest-src 'self'; media-src 'self'; object-src 'self'; script-src 'self' 'unsafe-inline' plausible.standardnotes.com *.stripe.com donorbox.org/widget.js *.paypal.com www.paypalobjects.com *.braintreegateway.com client-analytics.braintree.com *.coinbase.com; style-src 'self' 'unsafe-inline' *.braintreegateway.com client-analytics.braintree.com *.coinbase.com;
x-content-type-optionsnosniff
referrer-policyno-referrer-when-downgrade
access-control-allow-origin*

Identified technologies

Gatsby 5.3.3CloudflareAmazon CloudFront