stripe.com

Live email deliverability and anti-spoofing audit. Every value below was read from public DNS at the moment this page was generated.

Findings

• spf

  SPF ends in ~all (softfail); unauthorised mail is marked rather than rejected.

  v=spf1 ip4:198.2.180.60/32 ip4:13.111.2.227/32 include:spf1.stripe.com include:greenhouse-outbound-mail.stripe.com include:_spf.qualtrics.com ~all

  Fix: Move to -all once you have confirmed all senders are listed.

• mta sts

  No MTA-STS policy, so inbound mail can be downgraded to an unencrypted connection.

  Fix: Publish _mta-sts.stripe.com and host a policy at https://mta-sts.stripe.com/.well-known/mta-sts.txt.

• mx

  Mail is handled by Google Workspace.

  10 aspmx.l.google.com, 20 alt1.aspmx.l.google.com, 20 alt2.aspmx.l.google.com, 30 aspmx2.googlemail.com, 30 aspmx3.googlemail.com

• dmarc

  DMARC is enforcing with p=reject.

  v=DMARC1; p=reject; pct=100; fo=1; rua=mailto:dmarc-reports@stripe.com; ruf=mailto:dmarc-forensics@stripe.com;

• dkim

  DKIM keys found for 4 selectors.

  google._domainkey, s1._domainkey, s2._domainkey, mandrill._domainkey

Records

curl "https://mailgrade.dev/v1/domain?domain=stripe.com"

Check another domain