Is homes.com legit?
Homes.com appears to be a mostly safe website, backed by a very old domain and robust technical infrastructure. However, the current HTTP 403 error and the complete absence of visible legal pages and contact information are significant red flags that prevent full trust.
Real Estate average: 73/100 · based on 17 sites
Checked: April 18, 2026 at 8:09 AM UTC · Refresh
Is homes.com a scam? Here's what we found.
The site uses a modern TLS 1.3 connection with a valid certificate from DigiCert, enforced by an HSTS header, and Google Web Risk reports no threats. This indicates a strong base level of security.
With a domain aged over 34 years and registered through a reputable registrar like MarkMonitor, the site boasts a long and stable identity, which is a major trust factor.
While highly ranked by Tranco and clear on DNS blacklists, the missing favicon and lack of a Trustpilot presence are slight blemishes on an otherwise good reputational standing for an established domain.
The most significant concern is the HTTP 403 status, which prevents accessing contact details or social media. This complete lack of visible information is a major hurdle for transparency, especially for such a prominent site.
The complete absence of accessible privacy policies or terms of service due to the website status is a severe compliance issue that makes it impossible for users to understand their rights or the site's data practices.
The site benefits from solid infrastructure, including multiple IP addresses for DNS resolution and robust email authentication (SPF/DMARC). However, the lack of sitemap and robots.txt is less than ideal for a site of this scale.
Signals Detected
This is a well-known, high-traffic website
No structured data markup found
This business has no Trustpilot presence — not unusual for smaller or newer companies
Valid certificate, expires in 210 days
Certificate issued by DigiCert Inc
Connection uses TLS 1.3
No favicon found — unusual for an established business
Domain created 1992-02-21T05:00:00Z (34 years, 7 months ago)
Registered through MarkMonitor Inc.
Expires in 3231 days
DNSSEC status from WHOIS
crt.sh returned status 429
Site enforces HTTPS via HSTS
No threats detected by Google Web Risk
No robots.txt file — common for small sites
No sitemap found — common for smaller sites
Resolves to: 2a02:26f0:3500:18::1724:a28c, 2a02:26f0:3500:18::1724:a29a, 23.36.162.222, 23.36.162.213
Mail servers: costar-com.mail.protection.outlook.com.
Domain has SPF email authentication configured
Domain has DMARC email authentication configured
DNS providers: a6-67.akam.net., a3-65.akam.net., a1-73.akam.net., a22-64.akam.net., a4-66.akam.net., a9-64.akam.net.
Not found on any DNS blacklists
Website returned status 403
No obvious contact information found on homepage
No privacy policy or terms of service found
No social media links found on homepage
Could not query Wayback Machine
Fast page load
Embed This Badge
Stay Safe Online
Good habits to protect yourself, no matter the scan result.
Never reuse passwords across sites.
Add a second layer of security to your accounts.
Always verify unfamiliar stores before entering payment info.