Is indeed.com legit?
Indeed.com is a highly trusted platform, scoring well across security and infrastructure metrics. The main areas for improvement revolve around increased transparency, as some basic information was inaccessible due to bot protection.
Job Boards average: 68/100 · based on 10 sites
Checked: April 21, 2026 at 3:46 PM UTC
Is indeed.com a scam? Here's what we found.
The site exhibits excellent security practices with a valid SSL certificate from a reputable issuer, modern TLS 1.3, strong clickjacking protection, and a clean Google Web Risk report.
Indeed.com's identity is very strong, backed by a domain almost three decades old and registered with a major corporate registrar like MarkMonitor, indicating long-term stability and legitimacy.
The website holds significant global standing with its high Tranco rank and is clean on DNS blacklists. The lack of a Trustpilot profile is a minor gap, but not indicative of negative reputation.
Transparency is moderately good overall, but the bot protection preventing checks of contact info, legal pages, and social media creates a slight barrier to user and auditor access.
Compliance-related pages couldn't be checked due to bot protection. However, as one of the most visited sites, it's highly probable that they have robust internal compliance mechanisms.
The infrastructure is robust, featuring multiple DNS servers, email authentication (DMARC), DNSSEC, and fast page load times. The absence of structured data and a sitemap are minor omissions for such a large site.
Signals Detected
This is one of the most visited websites globally
No structured data markup found
This business has no Trustpilot presence — not unusual for smaller or newer companies
Domain created 1998-03-30T05:00:00Z (28 years, 5 months ago)
Registered through MarkMonitor Inc.
Expires in 341 days
DNSSEC status from WHOIS
Valid certificate, expires in 63 days
Certificate issued by Google Trust Services
Connection uses TLS 1.3
Resolves to: 162.159.130.67, 162.159.129.67
Mail servers: aspmx.l.google.com., alt2.aspmx.l.google.com., alt1.aspmx.l.google.com., aspmx2.googlemail.com., aspmx3.googlemail.com.
Domain has DMARC email authentication configured
DNS providers: brit.ns.cloudflare.com., kevin.ns.cloudflare.com.
No sitemap found — common for smaller sites
X-Frame-Options: SAMEORIGIN
Web server: cloudflare
No threats detected by Google Web Risk
robots.txt has 622 directives
Site has a favicon but no social sharing metadata
Website returned HTTP 403 — likely WAF or bot protection blocking automated checks. The site is online but restricts non-browser access.
Bot protection prevented page inspection
Bot protection prevented checking legal pages
Bot protection prevented page inspection
Not found on any DNS blacklists
Could not query Wayback Machine
Could not query certificate transparency logs
Fast page load
Stay Safe Online
Good habits to protect yourself, no matter the scan result.
Never reuse passwords across sites.
Add a second layer of security to your accounts.
Always verify unfamiliar stores before entering payment info.