storetrust.io
Run a free Shopify trust audit in under a minute. Spot the credibility gaps and checkout friction costing you sales, then get a ranked checklist to fix them.
At a glance
- Category
- E-commerce Tools
- Language
- English
- Paid-content signal
- No paid content foundObserved
- Registered
- 2026
- Hosting
- Hetzner Online GmbHInferred
- HTTPS certificate trusted
- PassedObserved
- Last updated
Related questions
More questions →What is storetrust.io?
Does storetrust.io offer paid content?
What languages does storetrust.io support?
How can I visit storetrust.io?
What are some alternatives to storetrust.io?
Website Overview
Identifiable technologies and additional version or configuration signals make the service easier to fingerprint, which may help targeted scanners narrow their checks. Page metadata, canonical configuration and social previews work together to provide more consistent search and sharing presentation.
Domain and Registration
The domain was registered less than a year ago and has limited historical evidence to assess. Transfer-protection status is present, helping reduce the risk of unauthorized domain transfers. The registrar is GoDaddy.com, LLC, a widely used domain service provider. The domain uses the common .io extension, which is not an independent safety signal.
DNS and Email
Nameservers are provided by GoDaddy, indicating managed DNS hosting. MX records point to the storetrust.io email service. No CNAME was found; the observed records resolve directly to addresses. SPF and DMARC are configured. DKIM status is unknown. TXT records include verification markers for Google. Such markers may also remain after a service stops being used.
TLS and Certificates
The certificate uses an RSA 2048-bit public key, offering broad client compatibility. The server supplied a complete certificate chain. No organization name is present in the certificate; the available fields are consistent with domain validation. The certificate was issued by Let's Encrypt, commonly associated with automated certificate services. The certificate's total validity is about 89 days, consistent with a short renewal cycle.
HTTP and Browser Security
The Server header exposes the software version: nginx/1.18.0 (Ubuntu). This makes version-targeted checks easier, but is not proof of an exploitable vulnerability. X-Powered-By exposes backend information: Next.js. The response lacks these common security headers: HSTS, CSP, Permissions-Policy. No obvious internal addresses or debug information were found in the headers. No explicit CDN or WAF marker was found in the response headers.
Technology Stack Analysis
The public page identifies Next.js, nginx 1.18.0, with exact versions exposed for 1 technologies. These details can narrow vulnerability checks, although exposure alone is not a vulnerability.
Search and Social Sharing
Open Graph is partially configured; og:image, og:type is missing. Twitter Card metadata is configured. JSON-LD includes Organization data, helping describe the organization as an entity. The title has 55 characters, within a common display range. A meta description is present, with 157 characters.
Hosting and Email
Registration details
| Registrar | GoDaddy.com, LLC |
|---|---|
| Registered | 2026-02-06 |
| Expires | 2027-02-06 |
| Domain status | clientDeleteProhibited https://icann.org/epp#clientDeleteProhibited、clientRenewProhibited https://icann.org/epp#clientRenewProhibited、clientTransferProhibited https://icann.org/epp#clientTransferProhibited、clientUpdateProhibited https://icann.org/epp#clientUpdateProhibited |
| Nameservers | ns43.domaincontrol.com、ns44.domaincontrol.com |
| DNSSEC | unsigned |
DNS records
| Type | Name | Value | TTL | Priority |
|---|---|---|---|---|
| A | storetrust.io | 142.132.186.64 | 3600 | — |
| MX | storetrust.io | mail.storetrust.io | 3600 | 10 |
| NS | storetrust.io | ns43.domaincontrol.com | 3600 | — |
| NS | storetrust.io | ns44.domaincontrol.com | 3600 | — |
| TXT | storetrust.io | brevo-code:221da24c29332ac36d37014e59bbd70d | 600 | — |
| TXT | storetrust.io | google-site-verification=PgFJ6gZB16JXZUmdh_cVlSMn0k1SSFd6JihACXo8Hjo | 600 | — |
| TXT | storetrust.io | stripe-verification=9f0ea64905b1fa125553ef3617025f0a15e62864916f22b78a0e78a9196757d2 | 600 | — |
| TXT | storetrust.io | v=spf1 mx ip4:78.46.5.205 ip4:78.46.2.154 ~all | 600 | — |
| DMARC | _dmarc.storetrust.io | v=DMARC1;p=none;sp=none;pct=50;rua=mailto:[email protected];adkim=r;aspf=r; | 3600 | — |
TLS and certificates
HTTP response headers
| Header | Value |
|---|---|
| content-type | text/html; charset=utf-8 |
| cache-control | s-maxage=31536000 |
| server | nginx/1.18.0 (Ubuntu) |
| x-frame-options | SAMEORIGIN |
| x-content-type-options | nosniff |
| referrer-policy | strict-origin-when-cross-origin |
Identified technologies
Pages, Search and Sharing
| Meta description | Run a free Shopify trust audit in under a minute. Spot the credibility gaps and checkout friction costing you sales, then get a ranked checklist to fix them. |
|---|---|
| Canonical URL | https://storetrust.io |
| Language | English (default) |
| Twitter Card | summary |
Social Sharing Preview
7 fieldsrobots.txt (opens in a new tab)
10 rulesAll bots 1 allowed · 2 disallowed
- Allow
/ - Disallow
/scan - Disallow
/st-admin/
oai-searchbot 1 allowed · 0 disallowed
- Allow
/
chatgpt-user 1 allowed · 0 disallowed
- Allow
/
perplexitybot 1 allowed · 0 disallowed
- Allow
/
andibot 1 allowed · 0 disallowed
- Allow
/
claudebot 1 allowed · 0 disallowed
- Allow
/
claude-user 1 allowed · 0 disallowed
- Allow
/
claude-searchbot 1 allowed · 0 disallowed
- Allow
/
No matching rules.
User reviews (0)