Substack.com (Domain) Investigation Report
Generated on Jun 17, 2026
Why we think so?
Substack looks like a real, established media platform, not a scam site. ✅ It has a long-registered domain (2010), a large audience, public trademark records, and a listed physical office in San Francisco. The main risks are platform-level: phishing, impersonation, and user complaints about support and billing, which are common for a large subscription service.
Risk Insights
Legitimate platform, not a fly-by-night site
- Domain age, trademark records, and traffic all point to an established company.
- The site uses standard production infrastructure like Cloudflare, Stripe, and Google services.
- No blacklist or Safe Browsing hit was found.
Main risk is impersonation, not the core domain
- Scam reports exist around fake Substack messages and phishing.
- Verify sender domains carefully before clicking links or paying.
- This matters most if you subscribe, publish, or manage payments.
Some user complaints are real
- Search results mention support, refund, and billing friction.
- That lowers service-confidence a bit, but not enough to call it fraudulent.
- Large platforms often attract this kind of complaint volume.
Category Scores
Red Flags & Warnings
- Public complaint sources mention billing, refund, and customer support issues, so the platform is not risk-free even though it appears legitimate.
- Scam and phishing reports exist around Substack impersonation, which means users still need to verify sender identity carefully.
Detailed Checks & Insights
0-100 Scale
Domain age and registration
Score: 96
Domain age and registration
"Long-lived domain with no obvious registration red flags."
Reason: The domain has a 2010 registration date, which is a strong legitimacy signal for a commercial site.
Registrar and DNS quality
Score: 88
Registrar and DNS quality
"Infrastructure looks normal and professionally managed."
Reason: Amazon Registrar, Cloudflare name servers, and valid MX records are typical of an operating company.
SSL validity
Score: 94
SSL validity
"No certificate trust issue is visible in the evidence set."
Reason: The SSL certificate is valid and currently active.
Traffic scale and engagement
Score: 93
Traffic scale and engagement
"High volume and meaningful engagement support authenticity."
Reason: Similarweb reports roughly 164.5M monthly visits and a 3.78 pages-per-visit rate, which is consistent with a large, active platform.
Brand and trademark support
Score: 95
Brand and trademark support
"Trademark ownership aligns with the domain and company name."
Reason: USPTO data shows live SUBSTACK trademark records linked to Substack Inc.
Public contact and presence
Score: 84
Public contact and presence
"No direct site email was scraped, but broader contact presence exists."
Reason: A physical office address and public social accounts are present, which helps confirm the organization behind the domain.
Malware and blacklist checks
Score: 97
Malware and blacklist checks
"Absence of blacklist hits lowers risk materially."
Reason: No Google Safe Browsing or crypto scam blacklist hits were returned.
Reputation and complaint signals
Score: 68
Reputation and complaint signals
"Mixed reputation, but not unusual for a high-traffic subscription platform."
Reason: Public complaints mention support, billing, refunds, and impersonation scams, but these are service-quality and platform-security concerns rather than proof of fraud.
Your Next Steps
-
1
If you plan to pay for a newsletter subscription, confirm you are on the official substack.com domain before entering payment details.
-
2
Watch for impersonation emails or DMs that ask for passwords, urgent action, or off-platform payments.
-
3
If you are a publisher, review Substack’s billing, refund, and support policies before launching paid subscriptions.
Key Evidence & Citations
-
WHOIS / DNS / SSL
⤷ Domain registered in 2010, with active DNS and a valid SSL certificate.
-
Similarweb traffic analytics
⤷ Shows large traffic volume, strong direct traffic, and a US-leading audience.
-
Similartech technology profile
⤷ Lists standard cloud, payment, analytics, and security services used by established web properties.
-
USPTO trademark search
⤷ Shows live SUBSTACK trademark records tied to Substack Inc.
-
Google Safe Browsing
⤷ No malicious detections were returned for the domain.
-
Google Places listing
⤷ Lists Substack Inc. at a San Francisco office address with a physical location.
-
Complaint and reputation checks
⤷ Search results describe mixed user complaints, mainly around support and billing.
📌 More actions for Substack.com:
🕵🏻 Keep vetting
Run an investigation on any domain. Verify legitimacy before you pay or subscribe!
👤 Find any Person »Find and investigate any person / online identity on 7 social media platforms.
📞 Investigate Phone No. »Attribute a phone number to real-world identities, linked online accounts, carrier data, emails, etc.
Community feedback
Not rated yet
0 reviews published
Leave a review
Reviews
No public reviews yet. Be the first to share your experience.
Get answers grounded in the sourced data. Citations like will link to the evidence locker.
WatchDog
Monitor this domain
Target Selected
substack.com
https://substack.com
-
Alerts you if the website is linked to a data breach or hacking attempt.
-
Tracks traffic changes that could signal a viral trend or major growth.
-
Notifies you if the website’s ownership or contact info suddenly changes.
-
Monitors for new security risks so you know about problems before they spread.