{
  "domain": "stripe.com",
  "fetched_at": "2026-06-21T03:37:11.359Z",
  "region": "iad",
  "mail_provider": "Google Workspace",
  "mx": {
    "records": [
      {
        "priority": 30,
        "exchange": "aspmx2.googlemail.com"
      },
      {
        "priority": 30,
        "exchange": "aspmx3.googlemail.com"
      },
      {
        "priority": 10,
        "exchange": "aspmx.l.google.com"
      },
      {
        "priority": 20,
        "exchange": "alt1.aspmx.l.google.com"
      },
      {
        "priority": 20,
        "exchange": "alt2.aspmx.l.google.com"
      }
    ],
    "issues": []
  },
  "spf": {
    "raw": "v=spf1 ip4:198.2.180.60/32 ip4:13.111.2.227/32 include:spf1.stripe.com include:greenhouse-outbound-mail.stripe.com include:_spf.qualtrics.com ~all",
    "parsed": {
      "mechanisms": [
        "ip4:198.2.180.60/32",
        "ip4:13.111.2.227/32",
        "include:spf1.stripe.com",
        "include:greenhouse-outbound-mail.stripe.com",
        "include:_spf.qualtrics.com",
        "~all"
      ],
      "lookupCount": 7
    },
    "issues": []
  },
  "dmarc": {
    "raw": "v=DMARC1; p=reject; pct=100; fo=1; rua=mailto:dmarc-reports@stripe.com; ruf=mailto:dmarc-forensics@stripe.com;",
    "parsed": {
      "p": "reject",
      "sp": null,
      "rua": [
        "mailto:dmarc-reports@stripe.com"
      ],
      "ruf": [
        "mailto:dmarc-forensics@stripe.com"
      ],
      "pct": 100,
      "adkim": null,
      "aspf": null
    },
    "issues": []
  },
  "dkim": {
    "checked": [
      "default",
      "mail",
      "dkim",
      "mailo",
      "google",
      "selector1",
      "selector2",
      "amazonses",
      "fm1",
      "fm2",
      "fm3",
      "s1",
      "s2",
      "s3",
      "k1",
      "k2",
      "mandrill",
      "protonmail"
    ],
    "found": [
      "google",
      "s1",
      "s2",
      "mandrill"
    ],
    "issues": []
  },
  "mta_sts": null,
  "tls_rpt": null,
  "bimi": null,
  "_canaryfleet": {
    "tool": "Email DNS Checker",
    "url": "https://canaryfleet.com/tools/email-dns-checker/stripe.com",
    "prose": "MX, SPF, DMARC are all set. Mail appears to be handled by Google Workspace. DKIM keys found at selectors `google`, `s1`, `s2`, `mandrill`.\n\nstripe.com has 5 MX records, pointing at aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com, aspmx2.googlemail.com, aspmx3.googlemail.com. That hostname pattern matches Google Workspace.\n\nstripe.com publishes an SPF record ending in ~all, which is a soft-fail policy — mail from senders outside the listed mechanisms is allowed through but marked as suspicious. It consumes 7 of the 10 DNS lookups allowed by RFC 7208 §4.6.4 (SPF treats include:, redirect=, a, mx, ptr, and exists: as lookups that count against the limit).\n\nDKIM keys were found at 4 selectors: `google`, `s1`, `s2`, `mandrill`. Multiple selectors usually indicates key rotation or multiple sending sources (e.g. one for transactional mail, one for marketing). Mail from this domain is signed cryptographically.\n\nstripe.com publishes a DMARC record with policy `p=reject` — mail that fails DMARC alignment should be rejected outright by receivers. Aggregate reports are being sent to 1 address (rua), which is how the domain owner sees who's authenticating against this domain.",
    "brand": "— canaryfleet.com — free email DNS checker\nFor ongoing monitoring of MX, SPF, DKIM, DMARC, SSL, uptime and more, see canaryfleet.com",
    "note": "Free email-DNS lookup at canaryfleet.com"
  }
}