My.mailstop.ai is being marketed to me by a postal shop in silicon Valley. The guy had me buy my business domain using the crm with cloudflare. He "accidentally" paid with his card instead of mine.

I do not want my domain paid by a stranger. Now I'm paranoid. How do I verify trust and security.