Is reddit.com legit?
Reddit.com is a well-established and generally trustworthy platform with strong security and infrastructure, but its aggressive bot protection significantly limits transparency regarding contact information and legal pages. While its age and global ranking speak to its reliability, the blocked access for essential consumer information warrants some caution.
Social Media average: 80/100 · based on 38 sites
Checked: April 21, 2026 at 8:20 PM UTC
Is reddit.com a scam? Here's what we found.
The site boasts a strong security posture with a valid SSL certificate using modern TLS 1.3, HSTS enforcement, and effective protection against clickjacking. It's clean according to Google Web Risk, indicating no detected threats.
Reddit has an excellent identity foundation with a very mature domain (over 20 years old) and a highly reputable registrar in MarkMonitor, reflecting a stable and established online presence.
As one of the most highly visited websites globally, Reddit.com has an undeniable and strong reputation. It's clean on DNS blacklists, further contributing to its positive standing, despite a neutral Trustpilot presence which is common for very large platforms.
Transparency is a notable weakness due to aggressive bot protection preventing checks on contact information and social media, and a robots.txt file that blocks all crawlers, which hinders auditability and consumer information access.
While some legal pages are present, bot protection restricts full access, which limits the ability to verify comprehensive compliance with user agreements and privacy policies.
The site demonstrates robust infrastructure with multiple IP addresses for DNS resolution, properly configured email authentication (DMARC), and multiple reliable name servers, all indicating a well-maintained and resilient setup.
Signals Detected
No structured data markup found
This is one of the most visited websites globally
This business has no Trustpilot presence — not unusual for smaller or newer companies
Valid certificate, expires in 166 days
Certificate issued by DigiCert Inc
Connection uses TLS 1.3
Domain created 2005-04-29T17:59:19Z (20 years, 3 months ago)
Registered through MarkMonitor Inc.
Expires in 738 days
DNSSEC status from WHOIS
Site has a favicon but no social sharing metadata
All crawlers are blocked with no exceptions — unusual for a legitimate business (2 directives)
Resolves to: 2a04:4e42:200::396, 2a04:4e42:400::396, 2a04:4e42:600::396, 2a04:4e42::396, 151.101.129.140, 151.101.193.140, 151.101.65.140, 151.101.1.140
Mail servers: aspmx.l.google.com., alt2.aspmx.l.google.com., alt1.aspmx.l.google.com., aspmx2.googlemail.com., aspmx3.googlemail.com.
Domain has DMARC email authentication configured
DNS providers: ns-1029.awsdns-00.org., ns-1887.awsdns-43.co.uk., ns-378.awsdns-47.com., ns-557.awsdns-05.net.
Site enforces HTTPS via HSTS
X-Frame-Options: SAMEORIGIN
Web server: snooserv
No threats detected by Google Web Risk
No sitemap found — common for smaller sites
Website returned HTTP 403 — likely WAF or bot protection blocking automated checks. The site is online but restricts non-browser access.
Bot protection prevented page inspection
Found one legal page; bot protection may be hiding the other
Bot protection prevented page inspection
Not found on any DNS blacklists
Could not query Wayback Machine
Could not query certificate transparency logs
Fast page load
Embed This Badge
Stay Safe Online
Good habits to protect yourself, no matter the scan result.
Never reuse passwords across sites.
Add a second layer of security to your accounts.
Always verify unfamiliar stores before entering payment info.