Is wise.com safe?
Very Likely Safe
No major red flags found. This looks like a legitimate, established website.
Why: Main reasons: domain registered 33+ years ago; not flagged by Google Safe Browsing; wise is the real brand's registered domain. Minor issues: page has no <title>; large response served uncompressed.
Positive highlights
- Domain registered 33+ years agoLong-established domains are far less likely to be disposable scams.
- Not flagged by Google Safe BrowsingNo malware, phishing, or unwanted-software match in Google's live threat database.
- HTTPS is enforcedAll redirects stayed on HTTPS. Traffic is encrypted end-to-end.
- Valid SSL / TLS certificate activeIssued by C=US, O="DigiCert, Inc.", CN=DigiCert Verified Mark RSA4096 SHA256 2021 CA1, valid for 259 remaining days.
- wise is the real brand's registered domainThe root label matches the brand exactly — this IS the brand's own domain.
- Popular website — ranked #1,047 worldwideListed in the Tranco top 1 million websites. Scam sites are almost never this popular.
- Site responded with 200Final URL: https://wise.com/. Response time 818ms.
- No impersonation patterns detectedDomain doesn't look like a typosquat, doesn't embed a well-known brand, and uses ASCII characters.
- Not listed on URLhaus malware blocklist
- Not present in PhishStats phishing feed
Negative highlights
- Page has no <title>Well-maintained sites always set a page title.
- Large response served uncompressedEnable gzip or brotli at the edge to cut transfer size dramatically.
Note: Registered via 101domain GRS Limited.
Note: 8 technologies detected. WooCommerce, Next.js, Svelte, Tailwind CSS, Bootstrap, Google Analytics, Google Tag Manager, Cloudflare
Key facts about wise.com
- Website
- wise.com
- Popularity
- #1,047 worldwide (Tranco top 1M)
- Domain created
- Mar 7, 1994 (32.7 years old)
- Domain expires
- Mar 8, 2028
- Registrar
- 101domain GRS Limited
- Owner details
- Public in WHOIS
- IP address
- 172.64.148.140
- Hosting / CDN
- Cloudflare
- SSL certificate
- "DigiCert · valid until Jul 30, 2027
- Email security
- SPF ✓ · DMARC ✓ (reject)
- Threat blocklists
- Not listed (clean)
- Technology
- WooCommerce, Next.js, Svelte, Tailwind CSS, Bootstrap, Google Analytics
Summary
98/100 — trusted. Long-established domain (32.7 years old), clean threat reputation, no impersonation patterns.
Full technical report
Domain Information
Registration timeline, age calculation, registrar details, and ICANN status.
- Registrar Name
- 101domain GRS Limited
- Creation Date
- March 7, 1994 (32.7 years ago)
- Last Updated
- March 30, 2021
- Registry Expiry Date
- March 8, 2028
- WHOIS Privacy Protection
- Publicly Visible
- Domain Status Codes
- client transfer prohibited, server delete prohibited, server transfer prohibited, server update prohibited
HTTP Headers & Security
Full HTTP response headers, HSTS, Content Security Policy (CSP), and security baselines.
accept-ch: Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Bitness
cache-control: private, no-cache, no-store, max-age=0, must-revalidate
cf-cache-status: DYNAMIC
cf-ray: a59e9cdb5de23564-CMH
connection: close
content-security-policy: default-src 'self';base-uri 'self';font-src 'self' data: https://fonts.gstatic.com https://widgets.wise.com/;form-action 'self' https://forms-eu1.hsforms.com/;frame-ancestors 'self' https://wiseturkiye.com.tr https://microapps.google.com https://microapps-prod-tt.sandbox.google.com;img-src 'self' data: blob: *.facebook.com https://wise.com https://wise-sandbox.com https://gtm.wise.com https://sst.wise.com https://tw-avatar.s3.eu-central-1.amazonaws.com https://tw-test-avatar-storage.s3.eu-west-1.amazonaws.com https://*.doubleclick.net https://www.googleadservices.com https://alb.reddit.com https://*.yahoo.co.jp https://bat.bing.com https://cx.atdmt.com https://daw291njkc3ao.cloudfront.net https://dq8dwmysp7hk1.cloudfront.net https://d2dgj1jjqgsb96.cloudfront.net https://help.wise.com/ https://platform-lookaside.fbsbx.com https://pixel.pointmediatracker.com https://cnv.event.prod.bidr.io https://q.quora.com https://s3-eu-west-1.amazonaws.com https://t.co https://wise.desk.com https://widgets.wise.com https://www.google-analytics.com https://www.gstatic.com https://i.ytimg.com https://px.ads.linkedin.com https://www.linkedin.com https://aax-eu.amazon-adsystem.com https://www.googletagmanager.com https://www.google.com https://www.google.com.au https://www.google.com.br https://www.google.com.sg https://www.google.com.ph https://www.google.com.my https://www.google.com.mx https://www.google.com.ua https://www.google.com.vn https://www.google.com.tr https://www.google.com.ar https://www.google.com.hk https://www.google.com.pk https://www.google.com.pe https://www.google.com.ng https://www.google.com.cy https://www.google.com.mt https://www.google.com.bd https://www.google.com.eg https://www.google.co.uk https://www.google.co.th https://www.google.co.jp https://www.google.co.nz https://www.google.co.id https://www.google.co.kr https://www.google.co.ve https://www.google.co.in https://www.google.co.il https://www.google.co.za https://www.google.de https://www.google.ca https://www.google.es https://www.google.pl https://www.google.ie https://www.google.ch https://www.google.pt https://www.google.nl https://www.google.it https://www.google.hu https://www.google.fr https://www.google.be https://www.google.ro https://www.google.fi https://www.google.cl https://www.google.cz https://www.google.ae https://www.google.lu https://www.google.se https://www.google.ru https://www.google.at https://www.google.bg https://www.google.ee https://www.google.dk https://www.google.no https://www.google.gr https://www.google.sk https://www.google.lt https://www.google.lv https://www.google.ge https://www.google.hr https://www.google.me *.googleusercontent.com *.analytics.google.com http://wi.se https://wi.se https://collector-20079.tvsquared.com https://analytics.twitter.com https://tr.line.me https://c5.adalyser.com https://c0.adalyser.com https://i.sng.link https://cdn.braze.eu https://pixel.pointmediatracker.com https://cnv.event.prod.bidr.io https://lux.speedcurve.com https://forms-eu1.hsforms.com/ https://analytics.google.com/g/s/collect;object-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' 'self' https://wise.com https://wise-sandbox.com https://sst.wise.com https://gtm.wise.com https://*.singular.net https://i.sng.link https://js-agent.newrelic.com https://bam.nr-data.net/ https://ajax.cloudflare.com bat.bing.com https://s.yimg.jp https://*.yahoo.co.jp a.quora.com static.hotjar.com https://script.hotjar.com/ https://collector-20079.tvsquared.com https://d.line-scdn.net www.google.co.uk www.google.com www.googletagmanager.com/ tagmanager.google.com/ https://storage.googleapis.com https://ajax.googleapis.com/ https://microapps.google.com https://microapps-prod-tt.sandbox.google.com googleads.g.doubleclick.net www.google-analytics.com www.googleadservices.com static.ads-twitter.com analytics.twitter.com www.snapengage.com insitez.blob.core.windows.net sjs.bizographics.com *.mxpnl.com https://cdn.pdst.fm https://us-central1-adaptive-growth.cloudfunctions.net https://bidr.io https://d2dgj1jjqgsb96.cloudfront.net https://www.redditstatic.com/ads/pixel.js https://snap.licdn.com https://js.adsrvr.org https://c5.adalyser.com https://c0.adalyser.com https://c.amazon-adsystem.com https://js-eu1.hs-scripts.com https://js.appboycdn.com https://decagon.ai https://transferwise.com https://bidr.io https://cdn.speedcurve.com https://lux.speedcurve.com https://js-eu1.hsforms.net https://challenges.cloudflare.com https://www.youtube.com;script-src-attr 'none';style-src 'self' 'unsafe-inline' blob: fonts.googleapis.com/css tagmanager.google.com/;upgrade-insecure-requests;report-uri /csp;child-src 'self' 'self' blob:;connect-src *;media-src 'self' 'self' data: https://wise.com/;manifest-src 'self' 'self';frame-src youtube.com www.youtube.com www.youtube-nocookie.com https://vars.hotjar.com https://bid.g.doubleclick.net https://www.googletagmanager.com https://insight.adsrvr.org https://match.adsrvr.org https://wise.com https://wise-sandbox.com https://gtm.wise.com https://dev-wi.se https://decagon.ai https://sst.wise.com https://transferwise.com https://wise.navattic.com https://js-eu1.hsforms.net https://forms-eu1.hsforms.com/ https://challenges.cloudflare.com https://feedback.wise.com;worker-src 'self' blob:
content-type: text/html; charset=utf-8
date: Fri, 13 Nov 2026 14:54:38 GMT
etag: W/"g61og87r4rjffn"
permissions-policy: ch-ua-model=("https://sdk-api-v1.singular.net"),ch-ua-platform-version=("https://sdk-api-v1.singular.net"),ch-ua-full-version-list=("https://sdk-api-v1.singular.net")
server: cloudflare
set-cookie: __cf_bm=1FoSvrFaaJNdOKvMLKlc4JagRrPV3Yb20fd4W4n4luM-1794581677.3360832-1.0.1.1-z6CgAjNfevfLJnErMnCyrBYMwRq9EzGzjeuNcCYfy8hR3zEoWDgwzEPIqnZuaJla9Q4Q5gBMDm5EsRyX_qQ75kP09F_f74Djbz4Y3iJfviwG54E7XXbJfnQothTfdFYxVKGzhFiT892yF40bRmKxgQ; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=wise.com; Expires=Fri, 13 Nov 2026 15:24:38 GMT
strict-transport-security: max-age=31536000
transfer-encoding: chunked
vary: Accept-Encoding
x-content-type-options: nosniff
x-download-options: noopen
x-xss-protection: 0DNS Records
Encrypted DoH resolution: A, AAAA, MX mail servers, authoritative NS, and TXT verification.
- IPv4 Addresses (A)
- 172.64.148.140, 104.18.39.116
- IPv6 Addresses (AAAA)
- None
- Mail Servers (MX)
- aspmx.l.google.com (Priority: 1), alt1.aspmx.l.google.com (Priority: 5), alt2.aspmx.l.google.com (Priority: 5), aspmx2.googlemail.com (Priority: 10), aspmx3.googlemail.com (Priority: 10)
- Authoritative Nameservers (NS)
- hope.ns.cloudflare.com, sean.ns.cloudflare.com
- TXT Records Found
- 45 TXT verification records
WHOIS & Identity Lookup
Domain ownership status, registry lifecycle, nameservers, and privacy redaction.
- Registrable Domain
- wise.com
- Registrar Organization
- 101domain GRS Limited
- WHOIS Privacy Status
- Public Registration Data
- Registry Status Codes
- client transfer prohibited, server delete prohibited, server transfer prohibited, server update prohibited
- Delegated Authoritative Nameservers
- hope.ns.cloudflare.com, sean.ns.cloudflare.com
- Registration Lifecycle
- Registered: 1994 → Expires: 2028
Email Security & Deliverability
SPF record validation, DMARC policy enforcement, DKIM selectors, and MX reputation.
- SPF Record
- v=spf1 include:_u.wise.com._spf.smart.ondmarc.com ~all
- DMARC Policy Mode
- Policy: REJECT
- DMARC Raw Record
- v=DMARC1; p=reject; adkim=r; pct=100; fo=1; ri=3600; rua=mailto:bb3c5ff6@inbox.ondmarc.com; ruf=mailto:bb3c5ff6@inbox.ondmarc.com;
- DKIM Selectors Detected
- google, s1, s2
Threat Intelligence & Blocklists
Multi-source malware feeds (URLhaus), phishing checks (PhishStats, Safe Browsing), and typosquats.
- Root Domain Label
- wise
- Top-Level Domain (TLD)
- .com (Standard TLD)
- Punycode Obfuscation
- No (Standard ASCII)
- Homoglyph / Lookalike Script
- No mixed scripts
- Brand Match Analysis
- Official Domain (wise)
- Typosquatting Risk
- Clean
Technology Stack & Metadata
Detected CMS, JavaScript frameworks, analytics tags, CDN providers, and page metadata.
- HTML Title
- —
- Meta Description
- Banks charge a lot for overseas transfers. We don't. Transfer money abroad easily and quickly with our low cost money transfers.
- Document Language
- en-US
- Character Encoding
- utf-8
- Viewport Setting
- initial-scale=1.0, width=device-width
- Generator Software
- —
Page Performance & Compression
Server response time, content payload size, Brotli/Gzip compression, and caching rules.
- HTTP Response Time
- 818 ms
- Payload Body Size
- 885.9 KB
- Compression Status
- Uncompressed
- Cache Directives
- private, no-cache, no-store, max-age=0, must-revalidate
AI Content Safety & Red Flags
High-pressure language, payment gateway safety, disposable domain analysis, and deceptive tactics.
98/100 — trusted. Long-established domain (32.7 years old), clean threat reputation, no impersonation patterns. Main reasons: domain registered 33+ years ago; not flagged by Google Safe Browsing; wise is the real brand's registered domain. Minor issues: page has no <title>; large response served uncompressed.
- Payment Red Flags
- None (No suspicious payment requests)
- High-Pressure Language
- None (No artificial urgency detected)
- Disposable Domain Risk
- No (Established infrastructure)
- Text Scanned Depth
- 298,612 characters verified
Server & Hosting Infrastructure
Primary IP address, web server software, CDN edge network, and redirect hop chain.
- Primary Web Server
- cloudflare
- CDN / Cloud Provider
- Cloudflare
- Primary IP Address
- 172.64.148.140
- HTTP Status Code
- 200 OK
- Final Landing Destination
- https://wise.com/
- Redirect Hop Count
- 0 hops
SSL / TLS Certificate
Active Certificate Authority, Common Name, validity period, expiration countdown, and SANs.
- Certificate Authority (Issuer)
- C=US, O="DigiCert, Inc.", CN=DigiCert Verified Mark RSA4096 SHA256 2021 CA1
- Subject Common Name (CN)
- Wise Payments Limited
- Validity Period
- 259 days remaining (Expires: 2027-07-30T23:59:59)
- Subject Alternative Names (SANs)
- 40 domains protected
- Certificates Logged (CT)
- 1036 certs recorded
Content & Transparency Policies
Linked privacy policy, terms of service, about page, social channels, and published contacts.
- Published Contact Emails
- ouvidoria@wise.com, u003eouvidoria@wise.com
- Published Phone Numbers
- 1510092490, 274548709260402, 856882063, 95355-8200, 9316712401, 90701-9382816
Robots.txt & Sitemap Discoverability
Search engine crawler directives, indexability, and declared XML sitemaps.
- Robots.txt Directives
- Present & Configured
- Sitemaps Declared
- https://wise.com/sitemap
- Disallow Rules Count
- 13 rules
View Raw robots.txt
User-agent: * Disallow: /attribution Disallow: /migrate-cookies Disallow: /visit/ Disallow: /*/*/currency-converter/ Disallow: /*/swift-bic/ Disallow: /*/help/search Disallow: /*//publiccurrency-converter/ Disallow: /widget # Stop bots from wasting crawl budget on these parameters Disallow: *redirectUrl=* Disallow: *0=/public* Disallow: */send-money/?sourceCurrency=* # Block MY send money to IL for compliance reasons Disallow: /my/send-money/send-money-to-israel # Allow bots to access API endpoints Allow: *gateway*sourceCurrency=* Allow: *comparisons*sourceCurrency=* User-agent: Rogerbot User-agent: Exabot User-agent: MJ12bot User-agent: Dotbot User-agent: Gigabot User-agent: AhrefsBot User-agent: BlackWidow User-agent: ChinaClaw User-agent: Custo User-agent: DISCo User-agent: Download\ Demon User-agent: eCatch User-agent: EirGrabber User-agent: EmailSiphon User-agent: EmailWolf User-agent: Express\ WebPictures User-agent: ExtractorPro User-agent: EyeNetIE User-agent: FlashGet User-agent: GetRight User-agent: GetWeb! User-agent: Go!Zilla User-agent: Go-Ahead-Got-It User-agent: GrabNet User-agent: Grafula User-agent: HMView User-agent: HTTrack User-agent: Image\ Stripper User-agent: Image\ Sucker User-agent: Indy\ Library User-agent: InterGET User-agent: Internet\ Ninja User-agent: JetCar User-agent: JOC\ Web\ Spider User-agent: larbin User-agent: LeechFTP User-agent: Mass\ Downloader User-agent: MIDown\ tool User-agent: Mister\ PiX User-agent: Navroad User-agent: NearSite User-agent: NetAnts User-agent: NetSpider User-agent: Net\ Vampire User-agent: NetZIP User-agent: Octopus User-agent: Offline\ Explorer User-agent: Offline\ Navigator User-agent: PageGrabber User-agent: Papa\ Foto User-agent: pavuk User-agent: pcBrowser User-agent: RealDownload User-agent: ReGet User-agent: SiteSnagger User-agent: SemrushBot User-agent: SmartDownload User-agent: SuperBot User-agent: SuperHTTP User-agent: Surfbot User-agent: tAkeOut User-agent: Teleport\ Pro User-agent: VoidEYE User-agent: Web\ Image\ Collector User-agent: Web\ Sucker User-agent: WebAuto User-agent: WebCopier User-agent: WebFetch User-agent: WebGo\ IS User-agent: WebLeacher User-agent: WebReaper User-agent: WebSauger User-agent: Website\ eXtractor User-agent: Website\ Quester User-agent: WebStripper User-agent: WebWhacker User-agent: WebZIP User-agent: Wget User-agent: Widow User-agent: WWWOFFLE User-agent: Xaldon\ WebSpider User-agent: Zeus Disallow: / Sitemap: https://wise.com/sitemap
Export & Share Intelligence
Download the complete official PDF verification report (all sections and technical signals expanded), or export raw JSON telemetry.
Scan Engine Performance
Automated multi-signal inspection pipeline
User reviews of wise.com
No reviews yet. Be the first to share your experience.