>the screenshots in this thread and the tweet in the post itself where the two stripe sites are compared side by side It's not at all clear whether or not the

>the screenshots in this thread and the tweet in the post itself where the two stripe sites are compared side by side It's not at all clear whether or not the page was ever publicly accessible like that. It certainly doesn't appear that he was distributing the link to the page if/when it looked like that. https://web.archive.org/web/20171211181630/https://stripe.ian.sh/ https://web.archive.org/web/20171211181630/https://stripe.ia... https://crt.sh/?id=393002115&opt=ocsp https://crt.sh/?id=393002115&opt=ocsp The site looked like this for at least 4 months until the cert was revoked. "obvious bid to confuse people" was a pretty harsh accusation, and you have essentially nothing back it up. >site through a phishing example Even if he had copied the stripe page, that still wouldn't make it phishing.