Is criteo.com legit?
This site is highly trusted. It demonstrates strong security practices with modern TLS and robust email authentication, and has a well-established online identity with extensive legal and contact information.
Professional Services average: 81/100 · based on 22 sites
Checked: April 21, 2026 at 5:18 PM UTC
Is criteo.com a scam? Here's what we found.
The overall security posture is very strong, featuring TLS 1.3, a valid SSL certificate, and HSTS enforcement. The only minor concern is a higher than ideal number of external scripts.
Criteo.com has a very strong and established identity, being over 20 years old with a long expiry date and publicly visible WHOIS information, which aligns with a reputable global company.
The site holds a very strong global reputation, indicated by its high Tranco rank and clean DNS blacklists. The lack of a Trustpilot profile is not unusual for a large B2B entity.
Criteo.com exhibits excellent transparency with readily available contact information, comprehensive branding, and an active presence across multiple social media platforms, making it easy for users to engage.
The site demonstrates full compliance by providing both a privacy policy and terms of service pages, which is essential for user trust and legal adherence.
The site's infrastructure is robust, with DMARC for email authentication, a present robots.txt, and fast page load times, all indicative of a well-managed and reliable online presence.
Signals Detected
This is one of the most visited websites globally
Site has structured data markup
This business has no Trustpilot presence — not unusual for smaller or newer companies
Domain created 2005-06-17T17:39:17Z (20 years, 1 months ago)
Registered through Gandi SAS
Expires in 3344 days
DNSSEC status from WHOIS
crt.sh returned status 502
Valid certificate, expires in 85 days
Certificate issued by Let's Encrypt
Connection uses TLS 1.3
Excessive number of external scripts — may indicate malicious injection
robots.txt has 61 directives and references a sitemap
Site enforces HTTPS via HSTS
Site has Content Security Policy configured
Web server: nginx
No threats detected by Google Web Risk
Resolves to: 2620:12a:8000::4, 2620:12a:8001::4, 23.185.0.4
Mail servers: criteo-com.o-v1.mx.microsoft.
Domain has DMARC email authentication configured
DNS providers: ns2.criteo.com., ns1.criteo.com.
Site has custom branding and social media metadata
Not found on any DNS blacklists
Could not query Wayback Machine
Website is live and responding
Website appears to have contact information
Website has both privacy policy and terms of service pages
Website links to multiple social media platforms
No sitemap found — common for smaller sites
Fast page load
Stay Safe Online
Good habits to protect yourself, no matter the scan result.
Never reuse passwords across sites.
Add a second layer of security to your accounts.
Always verify unfamiliar stores before entering payment info.