Is realtor.com legit?
This is a highly trusted website with a strong online presence and robust security measures. While bot protection prevented full validation of some transparency and reputation aspects, the site's long history and technical soundness inspire confidence.
Real Estate average: 77/100 · based on 17 sites
Checked: April 27, 2026 at 1:16 PM UTC
Is realtor.com a scam? Here's what we found.
The site boasts a secure and up-to-date SSL certificate, uses a strong TLS version, and implements HSTS and clickjacking protection, all contributing to a very secure browsing experience. Google Web Risk also confirms no threats.
With a 30-year domain age, realtor.com has a long-standing and established online identity. The WHOIS information is publicly available, although through a common registrar, which is acceptable for a site of this scale.
The extremely high Tranco rank indicates significant public recognition and trust. While some historical checks were blocked by bot protection, the site is clean on DNS blacklists, suggesting a good reputation. The absence of a Trustpilot profile is not a significant negative for a site of this type.
Basic branding and the inability to verify contact information or social media due to bot protection slightly hinder transparency. However, the presence of clear Legal Pages (Privacy & Terms) is a positive step.
The presence of both a Privacy Policy and Terms of Service indicates a commitment to legal and user-facing compliance, which is expected and well-executed for a major platform.
The site's infrastructure is robust, with multiple IP addresses for DNS resolution, proper email authentication (DMARC), and a well-configured server (CloudFront) that includes bot protection. The unsigned DNSSEC is a minor missed opportunity but not a critical flaw for an otherwise well-secured infrastructure.
Signals Detected
This is a well-known, high-traffic website
No structured data markup found
This business has no Trustpilot presence — not unusual for smaller or newer companies
Domain created 1995-09-14T04:00:00Z (30 years, 0 months ago)
Registered through Register.com - Network Solutions, LLC
Expires in 138 days
DNSSEC status from WHOIS
Resolves to: 44.240.130.1, 100.23.154.56, 35.85.10.128
Mail servers: mxb-00596a01.gslb.pphosted.com., mxa-00596a01.gslb.pphosted.com.
Domain has DMARC email authentication configured
DNS providers: ns-1267.awsdns-30.org., ns-1750.awsdns-26.co.uk., ns-62.awsdns-07.com., ns-976.awsdns-58.net.
Valid certificate, expires in 192 days
Certificate issued by Amazon
Connection uses TLS 1.2
Site has a favicon but no social sharing metadata
Site enforces HTTPS via HSTS
X-Frame-Options: SAMEORIGIN
Web server: CloudFront
No threats detected by Google Web Risk
robots.txt has 344 directives and references a sitemap
Site maintains a proper sitemap with 125 indexed pages
Website returned HTTP 429 — likely WAF or bot protection blocking automated checks. The site is online but restricts non-browser access.
Bot protection prevented page inspection
Website has both privacy policy and terms of service pages
Bot protection prevented page inspection
Not found on any DNS blacklists
Could not query Wayback Machine
Could not query certificate transparency logs
Fast page load
Embed This Badge
Stay Safe Online
Good habits to protect yourself, no matter the scan result.
Never reuse passwords across sites.
Add a second layer of security to your accounts.
Always verify unfamiliar stores before entering payment info.