alesian.security
← Top 100 Domains

wordpress.com

Number 91 of the Top 100 · Tranco rank 101

wordpress.com is a hosted website service run by Automattic, built on the open-source WordPress software. Anybody can make a free site under it, so a name like brand.wordpress.com may have nothing to do with the brand.

Can wordpress.com be forged?

Can wordpress.com be forged?

No. Receivers that check DMARC refuse mail that forges wordpress.com or its subdomains.

The exact name
reject · subdomains reject · no reports asked for
Names that copy
41 registered lookalikes can send mail. DMARC never sees them. See them →
Senders it names Mailchimp, Zendesk, SendGrid, +2
  • Mailchimp include:servers.mcsv.net· DKIM key found
  • Zendesk include:mail.zendesk.com· DKIM key found
  • SendGrid include:sendgrid.net
  • HubSpot include:145630858.spf04.hubspotemail.net
  • Amazon SES include:amazonses.com

These are the services the records name. A record can name a service no longer used, and a sender can sign without being named.

SPF-all · 8 of 10 lookups · 551 thousand addresses

Refuses others · 8 of 10 lookups · 0 of 2 void lookups · 550,977 IPv4 addresses · 0 IPv6 blocks · Includes of its senders

Every term and include
  • their record 16,385 — 1
  • their record 86,016 — 1
  • their record 256 — 1
  • their record 26,112 — 1
  • their record 241,152 — 2
  • their record 23,360 — 1
  • their record 157,696 — 1
  • -all — — —
    • DKIM6 keys found
    • k1._domainkey · rsa 1024
    • k2._domainkey · rsa 2048· Mailchimp
    • k3._domainkey · rsa 2048· Mailchimp
    • mandrill._domainkey · rsa 1024· Mailchimp Mandrill
    • zendesk1._domainkey · rsa 2048· Zendesk
    • zendesk2._domainkey · rsa 2048· Zendesk

    We look under the selectors of the services the records name. A domain can have keys we do not find.

    Sending names none found

    No subdomain of wordpress.com that we found publishes mail records.

    The first 50 names are checked.

    ReportsNo reports asked for

    Aggregate reports (rua) go to mailto:dmarc-reports@automattic.com. No failure reports are asked for.

    Transport MTA-STS none · TLS-RPT none · BIMI none

    MTA-STS asks senders to deliver to wordpress.com over encrypted connections only. TLS-RPT asks for reports when they cannot. BIMI shows a logo beside mail that passes DMARC at quarantine or reject.

    Read on Oct 28, 2026. Check it again yourself →

    Watch your own domain's mail this way: Sender Security · the DMARC Report