Email Security Index / News
Can wsj.com be impersonated by email?
Mostly no: forged email “from” wsj.com goes to spam.
wsj.com asks receiving mail servers to treat messages that fail its authentication as suspicious (DMARC p=quarantine), so a forged email claiming to be from wsj.com lands in spam rather than being refused outright.
- Grade
- C 66/100
- Rank
- 43 of 48
- In news
- 8 of 8
- DMARC
- quarantine
Measured 2026-11-07. Full live report card · Signed proof
Beyond impersonation
- OffMTA-STS Makes mail sent to the domain travel encrypted, so delivery can’t be silently downgraded to plain text.
- OffDNSSEC Signs the domain’s DNS answers, so the records above can’t be forged in transit.
- OffBIMI logo Shows the brand’s verified logo next to its messages in supporting inboxes.
News
The daily score is recorded from the next measurement.
No confirmed change yet. A change is listed once two checks six hours apart agree.
About this page
Measured from public DNS with the same checks anyone can run on their own domain, as part of the Email Security Index of 48 well-known brands. It describes what public DNS shows about email impersonation and delivery, not wsj.com’s security overall. Spotted something wrong? Tell us and it’s re-checked.