Nope, this isn’t the HTTPS-validated Stripe website you think it is

How extended validation certificates can be used to scam, not help, end users.
arstechnica.com arstechnica.com