Automatic security check · Public OSINT only
Company website
hydrogen.shopify.dev security check
Public OSINT valuation for hydrogen.shopify.dev: grade C (63/100). Title signal “Hydrogen: Shopify commerce in your framework”. 2 security headers present, 6 commonly expected headers missing. This is a defensive surface review — not a penetration test.
Caution advised
Mixed public signals. Review missing headers, domain age, and independent reputation before trusting it. Passive OSINT only · inventKeys=false.
- High concern
- Elevated risk
- Caution advised
- Trusted — verify
- Strong protections
Company website · Services · Social
Company website
Services & products
- No service or product links found on the scanned pages.
Social & LinkedIn
Links are extracted from public crawl HTML only. We never invent profiles or product pages.
Research engines · Complete scan
This complete report delivers web-check-class passive modules to customers — DNS, TLS, headers, mail auth, archives, CT logs and more — researched in the spirit of Lissy93/web-check. Port scan, traceroute and Shodan stay off by policy. Run a live check on the security-check tool for the full interactive dashboard.
Connect this report to your website
Add a free badge that links visitors to this official Wordle security report. You get referral traffic and a backlink; customers can verify the dossier.
Trustpilot · Glassdoor
How we scored hydrogen.shopify.dev
Positive signals
- TLS handshake OK (TLSv1.3).
- HTTP Strict Transport Security is present.
- DNS resolves publicly (A/AAAA).
- robots.txt is publicly available.
- RDAP domain record available (shopify.dev).
- Final HTTP status 200 at https://hydrogen.shopify.dev/.
Risk signals
- Content-Security-Policy not observed.
Findings
- TLS handshake OK (TLSv1.3).
- HTTP Strict Transport Security is present.
- Content-Security-Policy not observed.
- DNS resolves publicly (A/AAAA).
- robots.txt is publicly available.
- RDAP domain record available (shopify.dev).
- Final HTTP status 200 at https://hydrogen.shopify.dev/.
Technical details
DNS
resolved- A
- 23.227.38.74
- AAAA
- 2620:127:f00f:e::
- PTR
- shops.myshopify.com
- error
- —
TLS / certificate
ok- version
- TLSv1.3
- cipher
- TLS_AES_256_GCM_SHA384
- issuer
- Let's Encrypt
- notAfter
- Jan 25 07:38:33 2027 GMT
- SAN sample
- hydrogen.shopify.dev
- error
- —
HTTP & security headers
2 present- finalUrl
- https://hydrogen.shopify.dev/
- status
- 200
- server
- cloudflare
- x-powered-by
- —
- present
- strict-transport-security, x-content-type-options
- missing
- content-security-policy, x-frame-options, referrer-policy, permissions-policy, cross-origin-opener-policy, cross-origin-resource-policy
- cookie Secure
- False
- cookie HttpOnly
- False
Tech fingerprint (public)
passive- title
- Hydrogen: Shopify commerce in your framework
- generator
- —
- tech
- React, Shopify, Cloudflare
- script hosts
- cdn.shopify.com
- description
- Commerce primitives for you and your agents.
Company presence (crawl links)
extracted- companyWebsite
- https://hydrogen.shopify.dev/
- serviceLinks
- none found
- socialLinks
- GitHub: https://github.com/Shopify/hydrogen, X (Twitter): https://x.com/shopifydevs
RDAP / registration
rdap- domain
- shopify.dev
- registrar
- MarkMonitor Inc.
- created
- 2019-02-18T18:23:25.750Z
- expires
- 2027-02-18T18:23:25.750Z
- nameservers
- blue.foundationdns.com, blue.foundationdns.net, blue.foundationdns.org
- status
- client delete prohibited, client transfer prohibited, client update prohibited
- error
- —
Public well-known
passive- /.well-known/security.txt
- HTTP 404
- /robots.txt
- HTTP 200 · found
- /security.txt
- HTTP 404