Compare domains

Best Best setup on each check. Ties get no mark; failed lookups are not ranked.	Checking stripe.com Reading DNS, live	Checking neverssl.com Reading DNS, live
SPFWhich servers may send	stripe.com	neverssl.com
DKIMSignatures on each message	stripe.com	neverssl.com
DMARCWhat happens to forgeries	stripe.com	neverssl.com
Mail serversWhere replies are delivered	stripe.com	neverssl.com
MTA-STSForces TLS for inbound mail	stripe.com	neverssl.com
TLS-RPTReports on failed TLS	stripe.com	neverssl.com
BIMIBrand logo in the inbox	stripe.com	neverssl.com
BlocklistsSpamhaus, SpamCop, Barracuda, PSBL	stripe.com	neverssl.com
Forged mailWhat the records ask receivers to do	stripe.com	neverssl.com
Domains it trustsLapsed ones can be bought	stripe.com	neverssl.com
Allowed addressesListed as able to pass SPF	stripe.com	neverssl.com
ProblemsCritical, high and medium	stripe.com	neverssl.com

Best Best setup on each check. Ties get no mark; failed lookups are not ranked.	stripe.com Google Workspace Checked 10 Nov, 00:14 UTC Checking stripe.com Reading DNS, live	neverssl.com Provider not recognised Checked 10 Nov, 00:14 UTC Checking neverssl.com Reading DNS, live
SPFWhich servers may sendneverssl.com has no SPF	stripe.comSoft fail for others (good)7 of 10 lookups used	neverssl.comNo record (failing)
DKIMSignatures on each messageneverssl.com has no DKIM key we could find	stripe.com5 keys, strongest 1024-bit (needs work)2048-bit is recommended	neverssl.comNo keys found (needs work)On 36 common selectors
DMARCWhat happens to forgeriesneverssl.com has no DMARC	stripe.comReject, 100% of mail (good)Forgeries are refused	neverssl.comNo record (failing)
Mail serversWhere replies are deliveredneverssl.com cannot receive replies	stripe.comGoogle Workspace (good)5 hosts	neverssl.comNo mail servers (failing)
MTA-STSForces TLS for inbound mailBoth have no MTA-STS	stripe.comNot published (optional)	neverssl.comNot published (optional)
TLS-RPTReports on failed TLSBoth have no TLS reporting	stripe.comNot published (optional)	neverssl.comNot published (optional)
BIMIBrand logo in the inboxBoth show no brand logo	stripe.comNot published (optional)	neverssl.comNot published (optional)
BlocklistsSpamhaus, SpamCop, Barracuda, PSBL	stripe.comClear on 5 lists (good)	neverssl.comClear on 1 list (good)
Forged mailWhat the records ask receivers to doneverssl.com has nothing stopping forged mail	stripe.comRefused (good)On all three routes tried on paper	neverssl.comNot stopped (failing)Weakest route: forge your address
Domains it trustsLapsed ones can be bought	stripe.comAll still registered (good)5 outside domains	neverssl.comTrusts no outside domains (good)
Allowed addressesListed as able to pass SPF	stripe.com286,493 IPv4 addresses (optional)Plus 6 IPv6 ranges	neverssl.comNo SPF, so none listed (optional)
ProblemsCritical, high and mediumneverssl.com has critical or high problems	stripe.comNone serious (good)	neverssl.com2 critical, 1 high, 1 medium (failing)

SPFWhich servers may sendneverssl.com has no SPF

stripe.comSoft fail for others7 of 10 lookups used

neverssl.comNo record

DKIMSignatures on each messageneverssl.com has no DKIM key we could find

stripe.com5 keys, strongest 1024-bit2048-bit is recommended

neverssl.comNo keys foundOn 36 common selectors

DMARCWhat happens to forgeriesneverssl.com has no DMARC

stripe.comReject, 100% of mailForgeries are refused

neverssl.comNo record

Mail serversWhere replies are deliveredneverssl.com cannot receive replies

stripe.comGoogle Workspace5 hosts

neverssl.comNo mail servers

MTA-STSForces TLS for inbound mailBoth have no MTA-STS

stripe.comNot published

neverssl.comNot published

TLS-RPTReports on failed TLSBoth have no TLS reporting

stripe.comNot published

neverssl.comNot published

BIMIBrand logo in the inboxBoth show no brand logo

stripe.comNot published

neverssl.comNot published

BlocklistsSpamhaus, SpamCop, Barracuda, PSBL

stripe.comClear on 5 lists

neverssl.comClear on 1 list

Forged mailWhat the records ask receivers to doneverssl.com has nothing stopping forged mail

stripe.comRefusedOn all three routes tried on paper

neverssl.comNot stoppedWeakest route: forge your address

Domains it trustsLapsed ones can be bought

stripe.comAll still registered5 outside domains

neverssl.comTrusts no outside domains

Allowed addressesListed as able to pass SPF

stripe.com286,493 IPv4 addressesPlus 6 IPv6 ranges

neverssl.comNo SPF, so none listed

ProblemsCritical, high and mediumneverssl.com has critical or high problems

stripe.comNone serious

neverssl.com2 critical, 1 high, 1 medium