← Check another domain

stripe.com

80/100

B

Scanned 2026-05-12

Cached result — add ?fresh=1 to force a new scan

Subcheck breakdown

Check	Status	Score
DMARC policy	reject	25/25
SPF record	ok	10/10
DKIM selector	found	10/10
TLS certificate	ok	20/20
WHOIS integrity	rate_limited	5/10
Subdomain takeover	ct_unavailable	10/15
MTA-STS / TLSRPT	missing	0/5
DNSSEC	unsigned	0/5

Recommendations

Publish MTA-STS: add _mta-sts.stripe.com TXT and host a policy at https://mta-sts.stripe.com/.well-known/mta-sts.txt
Enable DNSSEC on stripe.com — DS records must be published to the com zone by your registrar

Details

Area	Detail
DMARC	v=DMARC1; p=reject; pct=100; fo=1; rua=mailto:dmarc-reports@stripe.com; ruf=mailto:dmarc-forensics@stripe.com;
SPF	v=spf1 ip4:198.2.180.60/32 ip4:13.111.2.227/32 include:spf1.stripe.com include:greenhouse-outbound-mail.stripe.com include:_spf.qualtrics.com ~all
DKIM selectors	google
TLS certificate	Ok (51 days remaining) — CN=DigiCert Global G3 TLS ECC SHA384 2020 CA1,O=DigiCert Inc,C=US
WHOIS registrar	—
WHOIS expires	—
Subdomains	0 found
DNSSEC	Unsigned