Public-data brief on a vendor domain for an invoice or payment workflow: RDAP ag...

{ "body": { "domain": "stripe.com" }, "bodyType": "json", "method": "POST", "type": "http" }

{ "example": { "checked_at": "2026-11-12T00:00:00.000Z", "contract": "tgw-vendor-check-beta-1", "disclaimer": "Mindset coaching for reflection. Not financial, investment, tax, or legal advice. This vendor brief is not a security audit, a KYB check, or a guarantee that an invoice is genuine.", "dns": { "a": [ "8.8.8.8" ], "aaaa": [], "error": null, "mx": [ "aspmx.l.google.com" ], "non_public": [] }, "domain": "stripe.com", "email_auth": { "dmarc": true, "dmarc_record": "v=DMARC1; p=reject", "spf": true, "spf_record": "v=spf1 include:_spf.google.com -all" }, "limitations": [ "This brief uses public RDAP, DNS, and either the live TLS certificate or a Certificate Transparency record. It does not use a paid threat feed.", "A caller-supplied URL is rejected. page_fetch is false. Only the domain name is queried, and only through public resolvers and public lookup hosts.", "A domain that resolves to a non-public address is not contacted. RDAP and certificate hosts are connected at the public address just resolved, with that name as SNI.", "Registration, mail, and certificate data can change. This is one moment, not a history.", "It is not a security audit, a KYB or sanctions check, or a recommendation to pay or refuse the vendor.", "live is false on this body: it was rendered from a frozen sample, not a live lookup of the domain." ], "live": false, "page_fetch": false, "registration": { "age_days": 5721, "registered": "2011-03-15T00:00:00.000Z", "registrar": "MarkMonitor Inc.", "source": "rdap", "statuses": [ "client transfer prohibited" ] }, "should_i_pay": "This does not decide whether you should pay. Confirm the payee through a channel you already trust before sending money.", "signature": "Continue to Think and Grow Wealthy.", "sources": [ "https://rdap.org/domain/stripe.com", "dns:1.1.1.1", "tls:443" ], "summary": "The domain has been registered for 5721 days, publishes mail authentication, and presented a current certificate from Google Trust Services. This is not a reason by itself to pay or to refuse payment.", "tls": { "error": null, "issuer": "Google Trust Services", "source": "handshake", "subject": "stripe.com", "valid_from": "2026-01-01T00:00:00.000Z", "valid_now": true, "valid_to": "2027-01-01T00:00:00.000Z" }, "verdict": "no_obvious_red_flags" }, "type": "json" }