alesian.security
← Top 100 Domains

openai.com

Number 77 of the Top 100 · Tranco rank 87

openai.com is OpenAI, the company behind ChatGPT. Its API, used by many other apps, is api.openai.com.

Can openai.com be forged?

Can openai.com be forged?

No. Receivers that check DMARC refuse mail that forges openai.com or its subdomains.

The exact name
reject · subdomains reject · reports to dmarcian
Names that copy
85 registered lookalikes can send mail. DMARC never sees them. See them →
Senders it names Google Workspace, Microsoft 365, HubSpot, +1
  • Google Workspace include:_spf.google.com· DKIM key found
  • Microsoft 365 include:spf.protection.outlook.com· DKIM key found
  • HubSpot include:8050860.spf04.hubspotemail.net
  • Marketo include:mktomail.com· DKIM key found
  • Google Workspace runs its mail hosts

These are the services the records name. A record can name a service no longer used, and a sender can sign without being named.

SPF-all · 7 of 10 lookups · 604 thousand addresses

Refuses others · 7 of 10 lookups · 0 of 2 void lookups · 604,265 IPv4 addresses · 11 IPv6 blocks · Includes of its senders

Every term and include
  • their record 98,304 1,536 /64s 1
  • their record 458,752 118,784 /64s 1
  • their record 23,360 — 1
  • their record 21,057 — 1
  • their record 2,792 — 3
  • -all — — —
    • DKIM5 keys found
    • google._domainkey · rsa 1024· Google Workspace
    • m1._domainkey · rsa 2048· Marketo
    • s1._domainkey · rsa 2048· SendGrid
    • s2._domainkey · rsa 1024· SendGrid
    • selector1._domainkey · rsa 1024· Microsoft 365

    We look under the selectors of the services the records name. A domain can have keys we do not find.

    Sending names 2 names, 2 at reject
    NamePolicySPF lookupsReports to
    community.openai.comreject (inherited)——
    events.openai.comreject—dmarcian

    The first 50 names are checked.

    Reportsdmarcian, on every name

    Aggregate reports (rua) go to mailto:tdfyvl0n@ag.dmarcian.com. Failure reports (ruf) are asked for.

    Transport MTA-STS none · TLS-RPT none · BIMI none

    MTA-STS asks senders to deliver to openai.com over encrypted connections only. TLS-RPT asks for reports when they cannot. BIMI shows a logo beside mail that passes DMARC at quarantine or reject.

    Read on Oct 28, 2026. Check it again yourself →

    Watch your own domain's mail this way: Sender Security · the DMARC Report