wordpress.com source code

The homepage of wordpress.com is 331.2 KB of HTML built with WordPress, WooCommerce, HubSpot. Its security headers get a C. We last checked it on 2026-10-27.

See the full source

The first lines of its HTML

<!DOCTYPE html>
<html lang="en" class="no-webp" dir="ltr">
  <head>
    <meta charset="UTF-8" />
    <meta http-equiv="x-ua-compatible" content="IE=Edge" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0, minimum-scale=1.0" />
    <title>
      WordPress.com: Everything You Need to Build Your Website
    </title>
    <meta name="description" content="Create your WordPress website with built-in hosting, premium themes, and powerful tools. No technical setup required. Star…
    <link rel="describedby" href="https://wordpress.com/llms.txt" type="text/plain" />
    <link rel="preconnect" href="//s1.wp.com" crossorigin="anonymous" />
    <link rel="preconnect" href="//fonts.gstatic.com" crossorigin="anonymous" />
    <link rel="preconnect" href="//stats.wp.com" crossorigin="anonymous" />
    <link rel="preconnect" href="//pixel.wp.com" crossorigin="anonymous" />
    <script>
      ( function () {
      try {
      var m = document.cookie.match( /(?:^|;\s*)tk_qs=([^;]*)/ );
      if ( ! m || ! m[1] || /bot|crawl|spider|slurp|wp-e2e-tests/i.test( navigator.userAgent ) ) {
      return;
      }
      // Split before decoding: entries are fully %-encoded, so a raw "+" or "%20" can only be the space separator, whichever encoder wrote the cookie.
      var q = m[1].split( /%20|\+| / );
      for ( var i = 0; i < q.length; i++ ) {
      if ( ! q[ i ] ) {
      continue;
      }
      var u = 'https://pixel.wp.com/t.gif?' + decodeURIComponent( q[ i ] ) + '&_rt=' + new Date().getTime() + '&_=_';
      if ( window.fetch ) {

All the code · Meta tags and report · Response headers · What changed