Is muckrack.com legit?
This site appears trustworthy overall, despite some minor accessibility issues due to bot protection and small branding oversights. The core technical security and infrastructure are robust.
Portfolio average: 82/100 · based on 25 sites
Checked: April 27, 2026 at 8:58 AM UTC
Is muckrack.com a scam? Here's what we found.
The site demonstrates strong security practices with a valid SSL certificate, modern TLS 1.3, HSTS enforcement, and effective content security and clickjacking protection. Google Web Risk confirms no threats.
The domain is mature, registered for over 17 years, and its WHOIS information is publicly available and current, indicating a stable and transparent identity.
The site has a good global traffic rank and is not listed on any DNS blacklists, suggesting a positive and clean reputation.
Bot protection significantly hinders the ability to verify critical transparency elements like contact information, legal pages, and social media presence, which is a notable concern for trust.
Due to bot protection, compliance-related pages like legal disclosures could not be checked, leading to an unknown status. This prevents a full assessment of regulatory adherence.
The site exhibits a robust infrastructure with multiple IP addresses, properly configured MX and DMARC records for email authentication, and highly responsive page load times. DNSSEC is unsigned, which is a minor point against an otherwise strong setup.
Signals Detected
This site has moderate global traffic
No structured data markup found
This business has no Trustpilot presence — not unusual for smaller or newer companies
Domain created 2009-03-27T22:52:39Z (17 years, 3 months ago)
Registered through GoDaddy Corporate Domains, LLC
Expires in 1065 days
DNSSEC status from WHOIS
Resolves to: 2606:4700::6812:c29, 2606:4700::6812:d29, 104.18.12.41, 104.18.13.41
Mail servers: aspmx.l.google.com., alt1.aspmx.l.google.com., alt2.aspmx.l.google.com., alt4.aspmx.l.google.com., alt3.aspmx.l.google.com., aspmx2.googlemail.com., aspmx3.googlemail.com.
Domain has DMARC email authentication configured
DNS providers: austin.ns.cloudflare.com., laura.ns.cloudflare.com.
Valid certificate, expires in 82 days
Certificate issued by Google Trust Services
Connection uses TLS 1.3
No favicon found — unusual for an established business
robots.txt has 21 directives
No sitemap found — common for smaller sites
Site enforces HTTPS via HSTS
Site has Content Security Policy configured
X-Frame-Options: SAMEORIGIN
Web server: cloudflare
No threats detected by Google Web Risk
Website returned HTTP 403 — likely WAF or bot protection blocking automated checks. The site is online but restricts non-browser access.
Bot protection prevented page inspection
Bot protection prevented checking legal pages
Bot protection prevented page inspection
crt.sh returned status 502
Not found on any DNS blacklists
Could not query Wayback Machine
Fast page load
Stay Safe Online
Good habits to protect yourself, no matter the scan result.
Never reuse passwords across sites.
Add a second layer of security to your accounts.
Always verify unfamiliar stores before entering payment info.