chatgpt.com
Number 71 of the Top 100 · Tranco rank 79
chatgpt.com is ChatGPT, OpenAI's assistant.
Can chatgpt.com be forged?
Can chatgpt.com be forged?
No. Receivers that check DMARC refuse mail that forges chatgpt.com or its subdomains.
- The exact name
- reject · subdomains reject · reports to dmarcian
- Names that copy
- 98 registered lookalikes can send mail. DMARC never sees them. See them →
What we noticed
- No DKIM selector answered, so the mail of the domain carries no signature.
Senders it names Cloudflare Email Routing
- Cloudflare Email Routing include:_spf.mx.cloudflare.net
- Cloudflare Email Routing runs its mail hosts
These are the services the records name. A record can name a service no longer used, and a sender can sign without being named.
SPF-all · 1 of 10 lookups · 8,192 addresses
Refuses others · 1 of 10 lookups · 0 of 2 void lookups · 8,192 IPv4 addresses · 1 IPv6 blocks · Includes of its senders
Every term and include
DKIM0 keys found
We look under the selectors of the services the records name. A domain can have keys we do not find.
Sending names none found
No subdomain of chatgpt.com that we found publishes mail records.
Reportsdmarcian
Aggregate reports (rua) go to mailto:tdfyvl0n@ag.us.dmarcian.com. Failure reports (ruf) are asked for.
Transport MTA-STS none · TLS-RPT none · BIMI none
MTA-STS asks senders to deliver to chatgpt.com over encrypted connections only. TLS-RPT asks for reports when they cannot. BIMI shows a logo beside mail that passes DMARC at quarantine or reject.
Read on Oct 28, 2026. Check it again yourself →
Watch your own domain's mail this way: Sender Security · the DMARC Report