Is salesforce.com legit?
Salesforce.com is a highly trusted platform with a strong web presence and robust technical infrastructure. While there are minor areas for improvement regarding transparency and legal completeness, these do not overshadow its overall reliability and security.
SaaS average: 81/100 · based on 62 sites
Checked: April 21, 2026 at 11:01 AM UTC
Is salesforce.com a scam? Here's what we found.
Excellent security measures are in place, including modern TLS 1.3, valid SSL, robust clickjacking protection, and no threats detected by Google Web Risk, indicating a secure browsing environment.
The domain boasts significant longevity (over 27 years) and is registered through a reputable corporate registrar, establishing a strong and well-established identity.
As one of the most visited websites globally with a high Tranco rank and a clean record on DNS blacklists, Salesforce.com has an excellent and established reputation.
While contact information and branding are complete, the lack of social media links on the homepage represents a minor gap in modern digital transparency.
The site falls short by missing either a privacy policy or terms of service, which are fundamental for legal compliance and user trust.
The infrastructure is very solid, featuring DNSSEC, multiple IP addresses, properly configured DMARC, and a present robots.txt, though the high number of external scripts is a slight concern.
Signals Detected
This is one of the most visited websites globally
Site uses structured data identifying itself as: Organization
This business has no Trustpilot presence — not unusual for smaller or newer companies
Domain created 1998-12-02T05:00:00Z (27 years, 9 months ago)
Registered through MarkMonitor Inc.
Expires in 183 days
DNSSEC status from WHOIS
Resolves to: 23.1.106.133, 23.1.99.130, 184.31.3.130, 104.109.10.129, 184.31.10.133, 184.25.179.132, 104.109.11.129, 23.1.35.132
Mail servers: mxa-00177002.gslb.pphosted.com., mxb-00177002.gslb.pphosted.com.
Domain has DMARC email authentication configured
DNS providers: pch1.salesforce-dns.com., pch2.salesforce-dns.com., udns1.salesforce.com., udns2.salesforce.com., udns3.salesforce.com., udns4.salesforce.com.
Excessive number of external scripts — may indicate malicious injection
Valid certificate, expires in 164 days
Certificate issued by DigiCert Inc
Connection uses TLS 1.3
robots.txt has 285 directives and references a sitemap
Site has custom branding and social media metadata
Site enforces HTTPS via HSTS
X-Frame-Options: SAMEORIGIN
No threats detected by Google Web Risk
Site maintains a proper sitemap with 944 indexed pages
Not found on any DNS blacklists
Could not query Wayback Machine
Website is live and responding
Website appears to have contact information
Website is missing either privacy policy or terms of service
No social media links found on homepage
Could not query certificate transparency logs
Average page load time
Stay Safe Online
Good habits to protect yourself, no matter the scan result.
Never reuse passwords across sites.
Add a second layer of security to your accounts.
Always verify unfamiliar stores before entering payment info.