Is trustpilot.com legit?
This site appears trusted overall, showing strong indicators of legitimacy and a long-standing online presence. However, the short domain expiry and bot protection preventing checks on critical transparency elements warrant attention.
Professional Services average: 81/100 · based on 22 sites
Checked: April 21, 2026 at 7:14 AM UTC
Is trustpilot.com a scam? Here's what we found.
Security is robust with a valid SSL certificate, modern TLS 1.2, and no threats detected by Google Web Risk. The failure to check Certificate Transparency is a minor point against an otherwise strong setup.
The domain is very old, indicating a long-established presence, and it holds a high global ranking. However, the relatively short domain expiry period is a slight concern for its long-term stability.
The site boasts an excellent global Tranco rank and is clean on all DNS blacklists, underscoring its strong and well-established reputation.
Transparency is hindered by strong bot protection preventing checks for contact information, legal pages, and social media presence, making it difficult to fully assess how openly the site communicates.
Assessing compliance directly was impossible due to bot protection blocking legal page inspection. However, for a site of this stature, a baseline level of compliance is expected.
The infrastructure is well-configured with multiple IP addresses, robust email authentication through DMARC, and redundant name servers. The absence of a sitemap is a minor shortcoming.
Signals Detected
This is one of the most visited websites globally
No structured data markup found
This business has no Trustpilot presence — not unusual for smaller or newer companies
Domain created 2007-06-30T14:19:31Z (18 years, 0 months ago)
Registered through NameWeb BVBA
Expires in 70 days
DNSSEC status from WHOIS
Website returned HTTP 403 — likely WAF or bot protection blocking automated checks. The site is online but restricts non-browser access.
Bot protection prevented page inspection
Bot protection prevented checking legal pages
Bot protection prevented page inspection
Valid certificate, expires in 222 days
Certificate issued by Amazon
Connection uses TLS 1.2
Resolves to: 3.248.45.65, 18.202.75.189, 34.254.74.107
Mail servers: aspmx.l.google.com., alt2.aspmx.l.google.com., alt1.aspmx.l.google.com., aspmx4.googlemail.com., aspmx5.googlemail.com., aspmx2.googlemail.com., aspmx3.googlemail.com.
Domain has DMARC email authentication configured
DNS providers: ns-1198.awsdns-21.org., ns-1859.awsdns-40.co.uk., ns-507.awsdns-63.com., ns-627.awsdns-14.net.
Blocks unknown crawlers by default but grants access to specific bots (837 directives, references a sitemap)
Web server: CloudFront
No threats detected by Google Web Risk
crt.sh returned status 502
No sitemap found — common for smaller sites
Site has a favicon but no social sharing metadata
Not found on any DNS blacklists
Could not query Wayback Machine
Fast page load
Stay Safe Online
Good habits to protect yourself, no matter the scan result.
Never reuse passwords across sites.
Add a second layer of security to your accounts.
Always verify unfamiliar stores before entering payment info.