Is coroflot.com legit?
This site appears to be trustworthy, with a long-standing online presence and strong technical foundations. While there are a few minor areas for improvement, like DNSSEC, it demonstrates excellent security and transparency practices typical of a reputable platform.
Portfolio average: 82/100 · based on 25 sites
Checked: April 27, 2026 at 8:26 AM UTC
Is coroflot.com a scam? Here's what we found.
The site boasts strong security with a valid SSL certificate using modern TLS 1.3 and HSTS, and has not been flagged by Google Web Risk, indicating a safe browsing environment.
With a domain age of 27 years, the site demonstrates significant longevity and stability. The registrar, while not the top tier, does not significantly detract from the established identity.
The site maintains a clean record on DNS blacklists and has a moderate global traffic rank, reflecting a positive and established online reputation.
The site provides clear contact information, legal pages (privacy & terms), and an active social media presence, fostering open communication with its users. The lack of a public sitemap is a minor detail.
The presence of both a privacy policy and terms of service demonstrates a commitment to user data protection and legal compliance, which is essential for user trust.
The site benefits from a robust infrastructure, including multiple IP addresses for DNS resolution, proper email authentication (SPF, DMARC), and fast page load times. The absence of DNSSEC is the primary area for improvement.
Signals Detected
This site has moderate global traffic
No structured data markup found
This business has no Trustpilot presence — not unusual for smaller or newer companies
Resolves to: 2606:4700:20::681a:42e, 2606:4700:20::681a:52e, 2606:4700:20::ac43:4689, 104.26.4.46, 104.26.5.46, 172.67.70.137
Mail servers: mx1.emailsrvr.com., mx2.emailsrvr.com., announce.coroflot.com., jobalerts.coroflot.com.
Domain has SPF email authentication configured
Domain has DMARC email authentication configured
DNS providers: emily.ns.cloudflare.com., jermaine.ns.cloudflare.com.
Domain created 1998-09-17T04:00:00Z (27 years, 0 months ago)
Registered through Network Solutions, LLC
Expires in 141 days
DNSSEC status from WHOIS
Valid certificate, expires in 61 days
Certificate issued by Google Trust Services
Connection uses TLS 1.3
Website is live and responding
Website appears to have contact information
Website has both privacy policy and terms of service pages
Website links to multiple social media platforms
robots.txt has 21 directives
crt.sh returned status 502
Site enforces HTTPS via HSTS
Web server: cloudflare
No threats detected by Google Web Risk
Site has custom branding and social media metadata
No sitemap found — common for smaller sites
Could not query Wayback Machine
Not found on any DNS blacklists
Fast page load
Stay Safe Online
Good habits to protect yourself, no matter the scan result.
Never reuse passwords across sites.
Add a second layer of security to your accounts.
Always verify unfamiliar stores before entering payment info.