Is goldmansachs.com legit?
While goldmansachs.com exhibits strong foundational and security elements typical of a major financial institution, the immediate lack of accessible content and critical legal pages is concerning. It appears to be a legitimate domain for Goldman Sachs, but the current accessibility issues and missing compliance documents warrant caution.
Finance average: 80/100 · based on 48 sites
Checked: April 18, 2026 at 8:09 AM UTC · Refresh
Is goldmansachs.com a scam? Here's what we found.
The site boasts robust security, including modern TLS 1.3 encryption, a valid SSL certificate from a reputable issuer, and powerful HSTS and Content Security Policy configurations. Google Web Risk also finds it clean, which are all excellent signs for data protection.
This domain is clearly linked to a long-established entity, evidenced by its 30-year domain age and registration through a corporate registrar. Impersonating such a high-profile domain would be extremely difficult, solidifying its identity.
Goldmansachs.com has an excellent online reputation, reflected in its very high Tranco rank and clean status on all DNS blacklists. These signals confirm it's a widely recognized and trusted entity on the internet.
This is where goldmansachs.com falters. The website currently returns a HTTP 403 error, preventing access to content. Furthermore, the absence of easily found contact information or social media links significantly reduces its transparency, which is critical for a financial brand.
A significant concern is the absence of crucial legal pages like a privacy policy and terms of service. For a prominent financial institution, these are non-negotiable for user trust and regulatory adherence.
The server architecture is sound, with proper DNS resolution, multiple mail servers, and excellent email authentication (SPF and DMARC). The only minor gap is the unsigned DNSSEC, which could be an improvement.
Signals Detected
This is a well-known, high-traffic website
No structured data markup found
This business has no Trustpilot presence — not unusual for smaller or newer companies
Domain created 1995-07-25T04:00:00Z (30 years, 2 months ago)
Registered through CSC Corporate Domains, Inc.
Expires in 96 days
DNSSEC status from WHOIS
crt.sh returned status 429
Valid certificate, expires in 167 days
Certificate issued by DigiCert Inc
Connection uses TLS 1.3
No robots.txt file — common for small sites
No sitemap found — common for smaller sites
Resolves to: 104.102.44.67
Mail servers: mxb-0014b501.gslb.pphosted.com., mxa-0014b501.gslb.pphosted.com.
Domain has SPF email authentication configured
Domain has DMARC email authentication configured
DNS providers: ns1.gs.com., ns6.gs.com., ns5.gs.com., ns2.gs.com., ns1.goldmansachs.biz., ns7.gs.com., ns1.gs360.net., ns1.goldmansachs.info., ns4.gs.com., ns3.gs.com.
Site enforces HTTPS via HSTS
Site has Content Security Policy configured
Web server: WebServer
No threats detected by Google Web Risk
Not found on any DNS blacklists
Website returned status 403
No obvious contact information found on homepage
No privacy policy or terms of service found
No social media links found on homepage
Site has a favicon but no social sharing metadata
Could not query Wayback Machine
Fast page load
Embed This Badge
Stay Safe Online
Good habits to protect yourself, no matter the scan result.
Never reuse passwords across sites.
Add a second layer of security to your accounts.
Always verify unfamiliar stores before entering payment info.