SAFE

No threats detected

All checks passed. This site appears legitimate — but always stay alert for phishing even on trusted domains.

Security Review

Is automattic.com legit or a scam?

Our verdict:Safe· 84/100

Official Automattic corporate site running WordPress.com, Tumblr and other services, with a 22-year domain age and zero malicious detections.

automattic.comScanned 5d ago
0
Trust score
SAFE
Heuristics 82·MT 85
Category tags
corporate90% MT confidence
View density

Analysis Summary

Threat Intelligence
0/92
All engines report clean
Domain Age
22 years old
Registered Jun 19, 2004
MT Intelligence
Safe
Low likelihood · 90% confidence

MT Intelligence

Advanced threat intelligence
MT Security Analyst
Low scam likelihoodengineMT · Guardiantrust85/100
MT AgentLive web researchVisual inspection
0%
Confidence
The page content directly matches the known Automattic company that owns WordPress.com, Tumblr, WooCommerce and several other major products. The domain is over 22 years old, registered through a major registrar without privacy protection, and the hosting IP shows minimal abuse history. No antivirus engines or browser blocklists flagged the site. Two independent review aggregator reviews label the company a scam over refund disputes, yet the evidence package confirms this is the genuine business with active US incorporation since around 2005. The site itself shows no signs of credential harvesting, malware distribution, or impersonation.
Full dossier
Analysis complete

Page Content

The homepage presents Automattic as a legitimate company promoting its portfolio of well-known services including WordPress.com, Tumblr, WooCommerce, Jetpack and others. It includes links to open-source projects and mobile apps with no aggressive sales tactics or login forms requesting sensitive data.

Infrastructure

Valid SSL certificate from Let's Encrypt, clean browser blocklist status, and an IP with zero meaningful abuse reports. External resources load only from the company's own domains and trusted properties.

Domain History

Registered in June 2004 and set to expire in 2033, owned directly by Automattic Inc. in the United States with no privacy masking.

Web Reputation

Business registration records confirm an active US corporation. A small number of customer-service complaints appear on review platforms, but no reports of the domain being used for malware or phishing.

Risk Factors
2
  • Two independent review aggregator reviews accuse the company of poor refund handling.
  • No phone, email, or postal address listed directly on the homepage.
Positive Signals
4
  • Domain registered 22 years ago and owned by the named company.
  • Zero detections across our antivirus network and browser blocklists.
  • Active US business registration with public transparency reports.
  • Operates multiple major, well-known internet services.
AI Recommendation
The site is safe to visit. Review any billing terms carefully before making purchases, as some users report difficulties with refunds.
Next-gen fraud intelligence
Evidence-backedCross-checked

Website Preview

Screenshot of automattic.com
LIVE RENDER
automattic.com

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site.

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for automattic.com, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Domain age
21 yrs
Registered Jun 2004
Business registration
Active · United States
Site traces back to an actively registered business.
Clone check
Not a clone
No well-known site's layout or branding detected here.
Typosquat check
No look-alike match
The domain doesn't resemble any well-known brand's spelling.
Web mentions
2 scam reports · 3 complaints
Key findings
6 headline facts from open-web research
  • Domain automattic.com registered June 19, 2004; expires 2033; owned by Automattic, Inc. (US)
  • Company operates WordPress.com, Tumblr, Beeper; headquartered San Francisco, CA
  • Maintains dedicated page warning about job scams impersonating Automattic (never asks for money via Telegram/Skype)
  • Trustpilot page shows multiple user reviews labeling the company a 'scam' over billing/refund disputes
  • Active US corporation with legal filings and transparency reports published on transparency.automattic.com
  • No evidence of the domain itself being a typosquat or clone of another brand
Scam reports (2)
Direct quotes from public scam databases, forums, and news.
  • Trustpilotopen

    "Avoid this SCAM company! It all started in 2020."

  • Trustpilotopen

    "Automattic is a Scam! Automattic is a business that I have dealt with for 16 years. ... They have not refunded me. WordPress is a scam!"

Business registration
Status: active · United States

Automattic Inc., San Francisco, CA; incorporated ~2005; EIN references like 20-2602536

Research summary
Narrative write-up from our AI analyst, grounded on the facts above

Our research found two independent review aggregator reviews labeling Automattic a scam due to unresolved refund disputes after years of service. The same sources confirm the domain belongs to the real Automattic Inc., a US corporation operating since approximately 2005 with active legal filings. No evidence of malware, phishing, or impersonation was located.

Antivirus Engines

Clean pass · verified
Clean across 92 engines

We cross-check every URL against our antivirus network of 92 malware and blacklist engines. None of them flagged this URL in the last scan.

0Malicious0Suspicious61Harmless92Engines
Clean
Kaspersky
Clean
Bitdefender
Clean
Microsoft
Not in pass
ESET-NOD32
Not in pass
Avira
Not in pass
Sophos
Clean
Fortinet
Clean
Google Safebrowsing
Clean
Emsisoft
Clean

No engine detections. The URL passed every antivirus and blacklist engine we queried in this scan. Stay vigilant — AV coverage is only one signal among many.

Security Scans

Blacklist Check
Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Contact Verification

We fetched the page and looked for real-world contact details. Legitimate businesses almost always publish an email on their own domain, a phone number, and a postal address. Scam shops usually don't.

What We Found
No clear contact details on the page
Emails on site's domainNone
Phone numbersNone
Postal addressNot listed
Linked social profiles5
Signal Summary
Several contact red flags
  • No contact email found anywhere on the page.
  • No phone number listed on the page.
  • No postal address visible on the page.
  • Links to 5 social profiles.

Domain & Encryption

Domain History
Age22 years old
RegistrarMarkMonitor Inc.
RegisteredJun 19, 2004
ExpiresJun 19, 2033
Owner privacyVisible
Encryption Certificate
StatusValid
ProtocolTLSv1.3
IssuerLet's Encrypt · E8
ExpiresJul 11, 2026 (40d)
Self-signedNo
Hosting & Technology
HostingAutomattic, Inc
Server locationUS
Web servernginx
Platform / CMSWordPress

Redirect Chain

Hops
1
Cross-domain
No
Lookalike
No
Punycode
No
  • 1301http://automattic.com/
  • 2200https://automattic.com/

Server Reputation

Abuse Intelligence
Confidence score0%
Reports on file2
ISPAutomattic, Inc
Usage typeContent Delivery Network

Still, stay alert

No major threat indicators — but a clean scan does not guarantee every page is safe, and phishing emails routinely spoof real domains.

  • Double-check the exact URL in your address bar

    Confirm you are actually on automattic.com and not a lookalike like a-utomattic.com.com or an IDN homoglyph.

  • Use a password manager

    Password managers only auto-fill on the exact domain they were saved for — they refuse to fill lookalike domains, which is the single best phishing defence.

  • Discuss this site on the forum

    If you have first-hand experience with this site — good or bad — share it with the MalwareTips community.

    Open

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing
Not listedCheck ↗
VirusTotal
Not listedCheck ↗
AbuseIPDB
Not listedCheck ↗

Referenced Domains

Outbound domains this page links to or loads resources from. Each links to its own security scan.

Safety FAQ

Common questions about this site, answered from the scan data on this page. These are auto-generated — not hand-written — so they always match the underlying report.

  • Our automated security review found no threat indicators on automattic.com. The site appears legitimate based on the signals we checked, but always stay alert for phishing emails that spoof real domains.

Final Verdict

0
Trust / 100
Final Verdict·automattic.com
SAFE

Automattic.com is the official corporate site for the company behind WordPress.com, Tumblr, and WooCommerce. Our analysis finds a clean security record, a 22-year-old domain, and confirmed US business registration. Occasional billing complaints exist on review sites but do not indicate malware or phishing.

The site is safe to visit. Review any billing terms carefully before making purchases, as some users report difficulties with refunds.

AV engines
92
MT passes
2
Net signals
0
Scan another URL
Security review completemalwaretips.com/url-scan
Recently scanned

Other Safe reports

Browse all reports
Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…
Loading comments…
This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.