alesian.security
← Top 100 Domains

adobe.com

Number 61 of the Top 100 · Tranco rank 68

adobe.com is Adobe: Acrobat, Photoshop and the Creative Cloud. Adobe's apps reach it to sign in and check licenses, and Adobe's name is often copied by fake "shared document" pages.

Can adobe.com be forged?

Can adobe.com be forged?

No. Receivers that check DMARC refuse mail that forges adobe.com or its subdomains.

The exact name
reject · subdomains reject · reports to Fortra Agari
Names that copy
112 registered lookalikes can send mail. DMARC never sees them. See them →

What we noticed

  • exists:%{i}._i.%{d}._d.espf.agari.com resolves for each message, so the senders it allows cannot be listed from outside.
  • include:%{d}.55.spf-protect.agari.com resolves for each message, so the senders it allows cannot be listed from outside.
Senders it names none named
  • Microsoft 365 runs its mail hosts

These are the services the records name. A record can name a service no longer used, and a sender can sign without being named.

SPF-all · 3 of 10 lookups · at least 300 addresses

Refuses others · 3 of 10 lookups · 0 of 2 void lookups · 300 IPv4 addresses · 0 IPv6 blocks · Kept by a sender-policy service

The full list cannot be known from outside: it uses macros.

Every term and include
  • exists:%{i}._i.%{d}._d.espf.agari.com resolves for each message, so its senders cannot be listed — — 1
  • include:%{d}.55.spf-protect.agari.com resolves for each message, so its senders cannot be listed — — 1
  • their record 299 — 1
  • 1 — —
  • -all — — —
    • DKIM7 keys found
    • default._domainkey · rsa 2048
    • google._domainkey · rsa 2048· Google Workspace
    • k1._domainkey · rsa 1024
    • mandrill._domainkey · rsa 1024· Mailchimp Mandrill
    • s1._domainkey · rsa 2048· SendGrid
    • s2._domainkey · rsa 1024· SendGrid
    • selector2._domainkey · rsa 1024· Microsoft 365

    We look under the selectors of the services the records name. A domain can have keys we do not find.

    Sending names 7 names, 7 at reject
    NamePolicySPF lookupsReports to
    assets.adobe.comreject—Fortra Agari
    email.adobe.comreject1Fortra Agari
    event.adobe.comreject5Fortra Agari
    events.adobe.comreject—Fortra Agari
    info.adobe.comreject3Fortra Agari
    mail.adobe.comreject6Fortra Agari
    marketing.adobe.comreject0Fortra Agari

    The first 50 names are checked.

    ReportsFortra Agari, on every name

    Aggregate reports (rua) go to mailto:adobe@rua.agari.com. Failure reports (ruf) are asked for.

    Transport MTA-STS none · TLS-RPT none · BIMI none

    MTA-STS asks senders to deliver to adobe.com over encrypted connections only. TLS-RPT asks for reports when they cannot. BIMI shows a logo beside mail that passes DMARC at quarantine or reject.

    Read on Oct 28, 2026. Check it again yourself →

    Watch your own domain's mail this way: Sender Security · the DMARC Report