Is stripe.com safe?
Very Likely Safe
No major red flags found. This looks like a legitimate, established website.
Why: Main reasons: domain registered 31+ years ago; not flagged by Google Safe Browsing; stripe is the real brand's registered domain. Minor issues: large response served uncompressed.
Positive highlights
- Domain registered 31+ years agoLong-established domains are far less likely to be disposable scams.
- Not flagged by Google Safe BrowsingNo malware, phishing, or unwanted-software match in Google's live threat database.
- HTTPS is enforcedAll redirects stayed on HTTPS. Traffic is encrypted end-to-end.
- stripe is the real brand's registered domainThe root label matches the brand exactly — this IS the brand's own domain.
- Site responded with 200Final URL: https://stripe.com/. Response time 171ms.
- HTTPS works with a valid certificateA secure connection was made on port 443. Certificate log details were unavailable at scan time.
- No impersonation patterns detectedDomain doesn't look like a typosquat, doesn't embed a well-known brand, and uses ASCII characters.
- Not listed on URLhaus malware blocklist
- Fast response (171ms)
- Not present in PhishStats phishing feed
Negative highlights
- Large response served uncompressedEnable gzip or brotli at the edge to cut transfer size dramatically.
Note: Registered via SafeNames Ltd..
Note: 6 technologies detected. WooCommerce, Next.js, Svelte, Tailwind CSS, Google Analytics, Cloudflare
Key facts about stripe.com
- Website
- stripe.com
- Popularity
- Not checked
- Domain created
- Sep 12, 1995 (31.2 years old)
- Domain expires
- Sep 11, 2027
- Registrar
- SafeNames Ltd.
- Owner details
- Public in WHOIS
- IP address
- 198.137.150.231
- Hosting / CDN
- Cloudflare
- SSL certificate
- HTTPS works (certificate details unavailable)
- Email security
- SPF ✓ · DMARC ✓ (reject)
- Threat blocklists
- Not listed (clean)
- Technology
- WooCommerce, Next.js, Svelte, Tailwind CSS, Google Analytics, Cloudflare
Summary
99/100 — trusted. Long-established domain (31.2 years old), clean threat reputation, no impersonation patterns.
Full technical report
Domain Information
Registration timeline, age calculation, registrar details, and ICANN status.
- Registrar Name
- SafeNames Ltd.
- Creation Date
- September 12, 1995 (31.2 years ago)
- Last Updated
- October 1, 2025
- Registry Expiry Date
- September 11, 2027
- WHOIS Privacy Protection
- Publicly Visible
- Domain Status Codes
- client delete prohibited, client transfer prohibited, client update prohibited, server delete prohibited, server transfer prohibited, server update prohibited
HTTP Headers & Security
Full HTTP response headers, HSTS, Content Security Policy (CSP), and security baselines.
cf-cache-status: DYNAMIC
cf-ray: a59e9ec8d999b86e-CMH
connection: close
content-security-policy: base-uri 'none'; child-src 'none'; connect-src https://c.increment.com https://c.stripe.dev https://c.stripe.global https://c.stripe.partners blob: https://b.stripecdn.com https://errors.stripe.com https://ext.stripe.com https://r.stripe.com https://stripe-images.s3.us-west-1.amazonaws.com https://stripe.com 'self'; default-src 'none'; font-src https://b.stripecdn.com 'self'; form-action https://stripe.com 'self'; frame-ancestors https://app.contentful.com 'self'; frame-src https://b.stripecdn.com https://js.stripe.com https://support-conversations.stripe.com 'self'; img-src data: https://assets.ctfassets.net https://assets.stripeassets.com https://b.stripecdn.com https://images.ctfassets.net https://images.stripeassets.com https://q.stripe.com 'self'; manifest-src 'none'; media-src https://assets.ctfassets.net https://assets.stripeassets.com https://b.stripecdn.com https://videos.ctfassets.net https://videos.stripeassets.com 'self'; object-src 'none'; script-src https://b.stripecdn.com https://js.stripe.com 'self' 'sha256-3aWvb9tRBjmz1OjR3n7mwiTm94+s4iki4mMZF82asmc=' 'sha256-5LtzXhT7UFn+GqP5pKEMGL08UNZsrzANHFEBW/mQHGw=' 'sha256-beLzNcen8LrazzSCRjAapoIMTgJI0osPWGNSX7aK6lc=' 'sha256-cCM0Z4lzGkzQnmbdVw+ouz0JRawyaKcZ4yiqzqYS7ek=' 'sha256-vTifGUJH6hJYTvstw4xJ4xfr/vE0ELkOV4GpCumyqfg=' 'sha256-KxhSaxKB5RFTQsqfRwp+zG7iLjvMrTAySqnSvWlqct0=' 'sha256-tMuJ8c00j54yuxogrdIJeGhNVB350dc56i969XRz/Mc=' 'sha256-aEFSvCaVnb2wNwuO3IzA8J44RdTKt6vms9beA7BcCYg=' 'sha256-0SWEc2BfR2o77i2vUiNNIrFKQkjc2Ujsr2hlfZ6oUek=' 'sha256-++XO0UzhS9XkPcAXD939+/NfpH8YUO8EoIgEQerdgxY=' 'report-sample'; style-src https://b.stripecdn.com 'self' 'unsafe-inline'; worker-src https://b.stripecdn.com 'self'; upgrade-insecure-requests; report-uri https://q.stripe.com/csp-violation?q=ADjgIJBreltwsLG9kApYr9I_GLbQqslGKu2NnJmY0CmMq7aP8b5FoN8KjYWthzY%3D; report-to csp
content-type: text/html; charset=utf-8
cross-origin-opener-policy: same-origin-allow-popups; report-to="wsp_coop"
cross-origin-opener-policy-report-only: same-origin-allow-popups; report-to="wsp_coop"
date: Fri, 13 Nov 2026 14:55:56 GMT
referrer-policy: no-referrer-when-downgrade
report-to: {"group":"coop","max_age":8640,"endpoints":[{"url":"https://q.stripe.com/coop-report"}],"include_subdomains":true}, {"group":"wsp_coop","max_age":8640,"endpoints":[{"url":"https://q.stripe.com/coop-report?s=ADjgIJBreltwsLG9kApYr9I_GLbQqslGKu2NnJmY0CmMq7aP8b5FoN8KjYWthzY="}],"include_subdomains":true}, {"group":"wsp_coep","max_age":8640,"endpoints":[{"url":"https://q.stripe.com/coep-report?s=ADjgIJBreltwsLG9kApYr9I_GLbQqslGKu2NnJmY0CmMq7aP8b5FoN8KjYWthzY="}],"include_subdomains":true}, {"group":"csp","max_age":8640,"endpoints":[{"url":"https://q.stripe.com/csp-report-v2?q=ADjgIJBreltwsLG9kApYr9I_GLbQqslGKu2NnJmY0CmMq7aP8b5FoN8KjYWthzY%3D&t=1"}],"include_subdomains":true}
reporting-endpoints: coop="https://q.stripe.com/coop-report", wsp_coop="https://q.stripe.com/coop-report?s=ADjgIJBreltwsLG9kApYr9I_GLbQqslGKu2NnJmY0CmMq7aP8b5FoN8KjYWthzY=", wsp_coep="https://q.stripe.com/coep-report?s=ADjgIJBreltwsLG9kApYr9I_GLbQqslGKu2NnJmY0CmMq7aP8b5FoN8KjYWthzY=", csp="https://q.stripe.com/csp-report-v2?q=ADjgIJBreltwsLG9kApYr9I_GLbQqslGKu2NnJmY0CmMq7aP8b5FoN8KjYWthzY%3D&t=1"
server: cloudflare
set-cookie: cid=811ab834-b53c-3ec0-26f7-09a27bb988eb; Path=/; Domain=stripe.com; Max-Age=7776000; Secure; SameSite=Lax
strict-transport-security: max-age=63072000; includeSubDomains; preload
transfer-encoding: chunked
vary: accept-encoding
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-mkt-cache: HIT
x-stripe-proxy-response: upstream
x-stripe-server-rpc-duration-micros: 59793
x-wc: 3ffDNS Records
Encrypted DoH resolution: A, AAAA, MX mail servers, authoritative NS, and TXT verification.
- IPv4 Addresses (A)
- 198.137.150.231, 198.202.176.231
- IPv6 Addresses (AAAA)
- None
- Mail Servers (MX)
- aspmx.l.google.com (Priority: 10), alt1.aspmx.l.google.com (Priority: 20), alt2.aspmx.l.google.com (Priority: 20), aspmx2.googlemail.com (Priority: 30), aspmx3.googlemail.com (Priority: 30)
- Authoritative Nameservers (NS)
- ns-1087.awsdns-07.org, ns-1882.awsdns-43.co.uk, ns-423.awsdns-52.com, ns-705.awsdns-24.net
- TXT Records Found
- 40 TXT verification records
WHOIS & Identity Lookup
Domain ownership status, registry lifecycle, nameservers, and privacy redaction.
- Registrable Domain
- stripe.com
- Registrar Organization
- SafeNames Ltd.
- WHOIS Privacy Status
- Public Registration Data
- Registry Status Codes
- client delete prohibited, client transfer prohibited, client update prohibited, server delete prohibited, server transfer prohibited, server update prohibited
- Delegated Authoritative Nameservers
- ns-1087.awsdns-07.org, ns-1882.awsdns-43.co.uk, ns-423.awsdns-52.com, ns-705.awsdns-24.net
- Registration Lifecycle
- Registered: 1995 → Expires: 2027
Email Security & Deliverability
SPF record validation, DMARC policy enforcement, DKIM selectors, and MX reputation.
- SPF Record
- v=spf1 ip4:198.2.180.60/32 ip4:13.111.2.227/32 include:spf1.stripe.com include:greenhouse-outbound-mail.stripe.com include:_spf.qualtrics.com ~all
- DMARC Policy Mode
- Policy: REJECT
- DMARC Raw Record
- v=DMARC1; p=reject; pct=100; fo=1; rua=mailto:dmarc-reports@stripe.com; ruf=mailto:dmarc-forensics@stripe.com;
- DKIM Selectors Detected
- google, s1, s2
Threat Intelligence & Blocklists
Multi-source malware feeds (URLhaus), phishing checks (PhishStats, Safe Browsing), and typosquats.
- Root Domain Label
- stripe
- Top-Level Domain (TLD)
- .com (Standard TLD)
- Punycode Obfuscation
- No (Standard ASCII)
- Homoglyph / Lookalike Script
- No mixed scripts
- Brand Match Analysis
- Official Domain (stripe)
- Typosquatting Risk
- Clean
Technology Stack & Metadata
Detected CMS, JavaScript frameworks, analytics tags, CDN providers, and page metadata.
- HTML Title
- Stripe | Financial Infrastructure to Grow Your Revenue
- Meta Description
- Stripe is a financial services platform that helps all types of businesses accept payments, build flexible billing models, and manage money movement.
- Document Language
- en-US
- Character Encoding
- utf-8
- Viewport Setting
- width=device-width, initial-scale=1, viewport-fit=cover
- Generator Software
- —
Page Performance & Compression
Server response time, content payload size, Brotli/Gzip compression, and caching rules.
- HTTP Response Time
- 171 ms
- Payload Body Size
- 660.5 KB
- Compression Status
- Uncompressed
- Cache Directives
- Standard caching rules
AI Content Safety & Red Flags
High-pressure language, payment gateway safety, disposable domain analysis, and deceptive tactics.
99/100 — trusted. Long-established domain (31.2 years old), clean threat reputation, no impersonation patterns. Main reasons: domain registered 31+ years ago; not flagged by Google Safe Browsing; stripe is the real brand's registered domain. Minor issues: large response served uncompressed.
- Payment Red Flags
- None (No suspicious payment requests)
- High-Pressure Language
- None (No artificial urgency detected)
- Disposable Domain Risk
- No (Established infrastructure)
- Text Scanned Depth
- 85,151 characters verified
Server & Hosting Infrastructure
Primary IP address, web server software, CDN edge network, and redirect hop chain.
- Primary Web Server
- cloudflare
- CDN / Cloud Provider
- Cloudflare
- Primary IP Address
- 198.137.150.231
- HTTP Status Code
- 200 OK
- Final Landing Destination
- https://stripe.com/
- Redirect Hop Count
- 0 hops
SSL / TLS Certificate
Active Certificate Authority, Common Name, validity period, expiration countdown, and SANs.
- Certificate Authority (Issuer)
- Not available (certificate logs did not respond)
- Subject Common Name (CN)
- —
- Validity Period
- Not available
- Subject Alternative Names (SANs)
- 1 domain protected
- Certificates Logged (CT)
- Verified in live TLS
Content & Transparency Policies
Linked privacy policy, terms of service, about page, social channels, and published contacts.
- Published Phone Numbers
- 2-4405-9962, 99548908847, 41056.391, 29658.230298, 51092.558, 1423805849013
Robots.txt & Sitemap Discoverability
Search engine crawler directives, indexability, and declared XML sitemaps.
- Robots.txt Directives
- Present & Configured
- Sitemaps Declared
- https://stripe.com/sitemap/sitemap.xml
- Disallow Rules Count
- 17 rules
View Raw robots.txt
Sitemap: https://stripe.com/sitemap/sitemap.xml User-agent: ia_archiver Allow: /docs/api Allow: /docs/api$ Disallow: /docs Disallow: /docs$ Disallow: /bitcoin/refund Disallow: /sources/refund Disallow: /sources/sepa_mandate Disallow: /sources/test_source Disallow: /sources/test_klarna Disallow: /handoff-healthcheck Disallow: /handoff User-agent: * Allow: /docs Allow: /docs$ Disallow: /bitcoin/refund Disallow: /sources/refund Disallow: /sources/sepa_mandate Disallow: /sources/test_source Disallow: /sources/test_klarna Disallow: /unsupported-browser Disallow: /handoff-healthcheck Disallow: /handoff User-agent: rogerbot Crawl-delay: 2
Export & Share Intelligence
Download the complete official PDF verification report (all sections and technical signals expanded), or export raw JSON telemetry.
Scan Engine Performance
Automated multi-signal inspection pipeline
User reviews of stripe.com
No reviews yet. Be the first to share your experience.