Is draftkings.com legit?
You should use caution when interacting with draftkings.com. While the domain itself is old and the security infrastructure appears robust, the complete absence of crucial legal pages, contact information, and an active website is deeply concerning for a brand of its supposed stature.
Gambling average: 71/100 · based on 10 sites
Checked: April 18, 2026 at 11:57 AM UTC · Refresh
Is draftkings.com a scam? Here's what we found.
The site boasts a strong security setup, using modern TLS 1.3 encryption and having a valid SSL certificate. It's also clean on Google Web Risk, indicating no known malware or phishing threats, which is a solid foundation for digital trust.
DraftKings has a very long-standing domain, over 15 years old, registered through a reputable provider like GoDaddy. This significant age lends considerable credibility to its identity and stability. The public WHOIS information further solidifies its verifiable presence.
Despite some missing branding elements like a favicon, the site's high traffic rank (Tranco #4921) and clean DNS blacklist status suggest a widely recognized and generally untarnished reputation. The longevity of the domain further reinforces this, though the lack of Trustpilot reviews means external social proof is limited.
This is a major area of concern. The absence of a favicon, identifiable contact information, and social media links on the homepage makes it difficult for users to engage or find support. Even with a known brand, this lack of transparency is a significant drawback.
The complete lack of a privacy policy and terms of service is a critical red flag, especially for a site that would undoubtedly handle user data and financial transactions. This omission suggests a severe disregard for user rights and legal obligations.
While the technical infrastructure generally appears sound with good DNS resolution, email authentication (SPF/DMARC), and fast page load, the critical 403 Forbidden status on the website itself renders it inaccessible. This functional failure severely undermines an otherwise robust technical backend. The absence of a robots.txt and sitemap is less critical but indicative of incomplete setup for search engines.
Signals Detected
This is a well-known, high-traffic website
No structured data markup found
This business has no Trustpilot presence — not unusual for smaller or newer companies
Domain created 2011-03-13T23:48:45Z (15 years, 3 months ago)
Registered through GoDaddy.com, LLC
Expires in 2521 days
DNSSEC status from WHOIS
Valid certificate, expires in 31 days
Certificate issued by Let's Encrypt
Connection uses TLS 1.3
crt.sh returned status 429
No favicon found — unusual for an established business
Site enforces HTTPS via HSTS
Web server: AkamaiGHost
No threats detected by Google Web Risk
Resolves to: 2a02:26f0:7100::210:180, 2a02:26f0:7100::210:17a, 23.50.131.160, 23.50.131.153
Mail servers: draftkings-com.mail.protection.outlook.com.
Domain has SPF email authentication configured
Domain has DMARC email authentication configured
DNS providers: a16-67.akam.net., a3-65.akam.net., a1-89.akam.net., a10-66.akam.net., a9-66.akam.net., a22-64.akam.net.
No robots.txt file — common for small sites
No sitemap found — common for smaller sites
Website returned status 403
No obvious contact information found on homepage
No privacy policy or terms of service found
No social media links found on homepage
Not found on any DNS blacklists
Could not query Wayback Machine
Fast page load
Embed This Badge
Stay Safe Online
Good habits to protect yourself, no matter the scan result.
Never reuse passwords across sites.
Add a second layer of security to your accounts.
Always verify unfamiliar stores before entering payment info.