Scam Lookup
Automated Website Trust & Risk Intelligence Report
https://scamlookup.net/website/bloomberg
Generated: Sat, 05 Sep 2026 10:53:50 GMT
Target Website: bloomberg.com
Overall Trust Score: 93/100 (Trusted)
bloomberg.com
Trusted
Scanned: Sep 5, 10:53 AMTRUST SCORE
93
CONFIDENT
Low Risk
93/100
TRUST SCORE
CONFIDENT
Low Risk
SAFETY
90/100
90/100
TRANSPARENCY
45/100
45/100
DOMAIN RISK
LowLow Tier
LowRisk
SSL SECURITY
100/100
100/100
PAYMENT RISK
NoNo Risk
NoRisk
VERDICT
Trusted
Trusted
AI Security Summary
93/100 — trusted. Long-established domain (32.9 years old), clean threat reputation, no impersonation patterns. Verdict driven by: no privacy policy found; site returned HTTP 403; missing Content Security Policy — worth extra caution before trusting.
No malware/phishing on feedsGood reputationHTTPS enabled
HTTPS & SSL
SecureSecure
Standard Trusted CA
Threat Status
CleanClean
No blacklists or malware
Domain Age
32.9 years32.9 years
Registered 9/29/1993
Reputation
High TrustHigh Trust
Based on 65+ verified signals
IP & Server
15.197.146.15615.197.146.156
cloudflare
Email Security
ProtectedProtected
SPF, DMARC, MX active
Performance
70 / 10070 / 100
Standard speed
Redirects
1 Hop1 Hop
Redirect chain analyzed
Top Priority RecommendationAction Needed
Site returned HTTP 403
The server is reachable but did not return a success status.
Why it matters
Addressing this signal prevents trust downgrades and potential security risks.
View Glossary GuidePositive Signals
- HTTPS is enforced
- Served through Cloudflare
- 2 address record(s) resolved
- 7 authoritative nameservers
- Domain registered 33+ years ago
- Owner information disclosed
- HTTPS encryption active & verified
- robots.txt published
Warnings
- Site returned HTTP 403
- Domain expires in 22 day(s)
- Missing Content Security Policy
- No privacy policy found
Critical Issues
No critical issues found
Domain passes all high-risk checks
- Registrar Name
- CSC Corporate Domains, Inc.
- Creation Date
- September 29, 1993 (32.9 years ago)
- Last Updated
- September 24, 2025
- Registry Expiry Date
- September 28, 2026
- WHOIS Privacy Protection
- Publicly Visible
- Domain Status Codes
- client transfer prohibited, server delete prohibited, server transfer prohibited, server update prohibited
ICANN Status Badges
client transfer prohibitedserver delete prohibitedserver transfer prohibitedserver update prohibited
Domain registered 33+ years ago
Long-established domains are far less likely to be disposable scams.
+15
Registered via CSC Corporate Domains, Inc.
Owner information disclosed
The domain publishes registrant contact info — a small positive transparency signal.
+2
Domain expires in 22 day(s)
Owner may not intend to renew.
-3
Security Header Baseline
Strict-Transport-SecurityMissing
Content-Security-PolicyMissing
X-Frame-OptionsMissing
X-Content-Type-Options Present
Referrer-PolicyMissing
Permissions-PolicyMissing
Recommended Missing Headers
missing: Content Security Policymissing: X-Frame-Optionsmissing: Referrer Policymissing: Permissions Policy
All Response Headers (17)
HSTS is set
Tells browsers to only use HTTPS for this domain.
+6
Missing Content Security Policy
Restricts which scripts and resources the page can load.
-4
Missing X-Frame-Options
Prevents clickjacking by disallowing framing.
-3
X-Content-Type-Options is set
Blocks MIME-sniffing browser attacks.
+2
Missing Referrer Policy
Controls what referrer information is sent with requests.
-2
Missing Permissions Policy
Restricts access to powerful browser features (camera, mic, etc.).
-2
- IPv4 Addresses (A)
- 15.197.146.156, 3.33.146.110
- IPv6 Addresses (AAAA)
- None
- Mail Servers (MX)
- mgcnj1.bloomberg.com (Priority: 0), mgcnj2.bloomberg.com (Priority: 0), mgcny1.bloomberg.com (Priority: 0), mgcny2.bloomberg.com (Priority: 0)
- Authoritative Nameservers (NS)
- dns1.p01.nsone.net, dns2.p01.nsone.net, dns3.p01.nsone.net, dns4.p01.nsone.net, pdns1.ultradns.net, pdns3.ultradns.org, pdns5.ultradns.info
- TXT Records Found
- 23 TXT verification records
A Records (IPv4)
15.197.146.1563.33.146.110
TXT Verification Records
OSSRH-64276
Ymxvb21iZXJn
MS=ms33692690
MS=ms99943004
2smsverify=08qXd7f0aUa5IPq0N4ETgQ
ZOOM_verify_8UDWCiGoiAVgGEuiZNG9Ld
ZOOM_verify_rl-mcFScS8W6864E30mlZg
apple-domain-verification=9cs9hMRccEtbVb8h
jamf-site-verification=VJNRhgJ90SmyugkIPAdfCQ
google-gws-recovery-domain-verification=72311760
airtable-verification=15d4376d6d99cc906abbcb295b4245da
openai-domain-verification=dv-XaK3IjuwWpMmfss9VYKwn0eY
cursor-domain-verification-asb77c=D43c1zjGqO3rTemQvZ121NSfi
lutron-domain-verification-p8wzsk=PQcs5tfle6vYve4ulSshxyMYi
extensis-domain-verification=707df5b4-0868-499f-af75-51718e082698
google-site-verification=CI2IKDBbk_gcKk_9CFFUrF-ZLZToKXQ7SAJ96fjqZ_I
google-site-verification=ClT3QBQ-Rd4b3AAq2gmQ-u_94EliZRmC2e-Kb4t9zEo
google-site-verification=vH_zs-JrwvXxkyuUqmeN9t3iMYZqyt1-BJUsoyN3ca8
F2QdzLTE6LTOyOQ7pQzoSY2pnwVM5pnfiqY3zOoYvS3LoVmIUr0J3op5vQI8Tg8VQwt24UK8v7oFWfbrCBWYYw==
QnH3utpbwmcXnxwnErM2by/pp37P7fYtF9si0rMmb9FgwB98zU8UAzdl1GbyQMdyNFLKobFRdX6FfLlH/LG+og==
v=spf1 ip4:69.184.0.0/13 ip4:199.172.169.0/24 ip4:208.22.56.0/24 ip4:69.191.241.124 -all
atlassian-domain-verification=gK9LJEftkavNAe/keDgXDWOhGwUV02GQTz9BbfKLplkTTtpciOH5eL1W6u7BRfVR
parallels-domain-verification=47460854911b478da11221dc20e8cc0340a92adf1e6b4ff08a5e941f5379c267
2 address record(s) resolved
+4
7 authoritative nameservers
+2
- Registrable Domain
- bloomberg.com
- Registrar Organization
- CSC Corporate Domains, Inc.
- WHOIS Privacy Status
- Public Registration Data
- Registry Status Codes
- client transfer prohibited, server delete prohibited, server transfer prohibited, server update prohibited
- Delegated Authoritative Nameservers
- dns1.p01.nsone.net, dns2.p01.nsone.net, dns3.p01.nsone.net, dns4.p01.nsone.net, ns51.ultradns2.com, ns51.ultradns2.org
- Registration Lifecycle
- Registered: 1993 → Expires: 2026
Nameservers (NS)
dns1.p01.nsone.netdns2.p01.nsone.netdns3.p01.nsone.netdns4.p01.nsone.netns51.ultradns2.comns51.ultradns2.org
Domain registered 33+ years ago
Long-established domains are far less likely to be disposable scams.
+15
Registered via CSC Corporate Domains, Inc.
Owner information disclosed
The domain publishes registrant contact info — a small positive transparency signal.
+2
Domain expires in 22 day(s)
Owner may not intend to renew.
-3
- SPF Record
- v=spf1 ip4:69.184.0.0/13 ip4:199.172.169.0/24 ip4:208.22.56.0/24 ip4:69.191.241.124 -all
- DMARC Policy Mode
- Policy: REJECT
- DMARC Raw Record
- v=DMARC1; p=reject; adkim=r; aspf=r; ruf=mailto:dmarc-ruf@dmarc-bloomberg.com; fo=1; rua=mailto:dmarc-rua@dmarc-bloomberg.com
- DKIM Selectors Detected
- None detected
Email Protection Summary: This domain has strong email authentication configured to prevent spammers from sending emails impersonating this brand.
SPF record published
+5
DMARC published (reject)
+6
URLhaus Malware
Clean / Not Listed
PhishStats Feed
Clean / Not Listed
Google Safe Browsing
Not checked
- Root Domain Label
- bloomberg
- Top-Level Domain (TLD)
- .com (Standard TLD)
- Punycode Obfuscation
- No (Standard ASCII)
- Homoglyph / Lookalike Script
- No mixed scripts
- Brand Match Analysis
- No recognized brand impersonation
- Typosquatting Risk
- Clean
No impersonation patterns detected
Domain doesn't look like a typosquat, doesn't embed a well-known brand, and uses ASCII characters.
+8
Detected Technologies by Category
analytics
Google AnalyticsGoogle Tag Manager
cdn
Cloudflare
Page Metadata & Fingerprint
- HTML Title
- Bloomberg - Are you a robot?
- Meta Description
- —
- Document Language
- en
- Character Encoding
- utf-8
- Viewport Setting
- width=device-width, initial-scale=1
- Generator Software
- —
3 technologies detected
Google Analytics, Google Tag Manager, Cloudflare
Mobile viewport configured
+2
Missing meta description
-2
Items to Fix & Optimize
Text compression (Brotli/Gzip)
MUCH NEEDEDEnable on server or CDN
Modern image formats (WebP/AVIF/SVG)
OPTIONALConvert heavy images to WebP/AVIF
Protocol
HTTP/2
Binary framing, multiplexed
Compression
NONE
No compression detected
Optimization Signals (From Detectable Headers & Assets)
Image Formats
Legacy / Unchecked
Transfer
Uncompressed
Transport
HTTP/2
These are server-side signals. Actual Core Web Vitals (LCP, INP, CLS) require real-user measurement via PageSpeed Insights.
Detected Asset & Image Formats
WebPAVIFSVGJPEGPNG
- HTTP Response Time
- 525 ms
- Payload Body Size
- 13.5 KB
- Compression Status
- Uncompressed
- Cache Directives
- Standard caching rules
No findings.
AI Content Evaluation
93/100 — trusted. Long-established domain (32.9 years old), clean threat reputation, no impersonation patterns. Verdict driven by: no privacy policy found; site returned HTTP 403; missing Content Security Policy — worth extra caution before trusting.
- Payment Red Flags
- None (No suspicious payment requests)
- High-Pressure Language
- None (No artificial urgency detected)
- Disposable Domain Risk
- No (Established infrastructure)
- Text Scanned Depth
- 689 characters verified
No scam-correlated language found on the home page
No crypto-only / gift-card / wire-only payment demands, and no obvious urgency tactics.
+6
- Primary Web Server
- cloudflare
- CDN / Cloud Provider
- Cloudflare
- Primary IP Address
- 15.197.146.156
- HTTP Status Code
- 403 OK
- Final Landing Destination
- https://www.bloomberg.com/
- Redirect Hop Count
- 1 hop
Redirect Hop Chain
- 1.https://bloomberg.com/ → https://www.bloomberg.com/
Site returned HTTP 403
The server is reachable but did not return a success status.
-6
HTTPS is enforced
All redirects stayed on HTTPS. Traffic is encrypted end-to-end.
+10
Served through Cloudflare
Sites behind a major CDN benefit from DDoS protection and edge caching.
+4
- Certificate Authority (Issuer)
- Standard Trusted CA
- Subject Common Name (CN)
- bloomberg.com
- Validity Period
- 60 days remaining (Expires: 2026-11-04T10:53:50.740Z)
- Subject Alternative Names (SANs)
- 1 domain protected
- Certificates Logged (CT)
- 1 certs recorded
Subject Alternative Names (Sample)
bloomberg.com
HTTPS encryption active & verified
Live TLS connection established successfully on port 443 with valid cipher suites.
+8
Key Legal & Transparency Pages
- Published Phone Numbers
- 506363704
No privacy policy found
Legally required in most jurisdictions. Its absence is a real red flag.
-4
Terms of service linked from home page
+5
Contact page linked from home page
+5
No about page found
Reputable sites usually publish a about page.
-3
No refund/return policy found
Reputable sites usually publish a refund/return policy.
-3
Cookie policy linked from home page
+2
Phone number published
+2
- Robots.txt Directives
- Present & Configured
- Sitemaps Declared
- https://www.bloomberg.com/sitemaps/news/index.xml, https://www.bloomberg.com/sitemaps/news/latest.xml, https://www.bloomberg.com/sitemaps/collections/index.xml, https://www.bloomberg.com/sitemaps/media/video/index.xml, https://www.bloomberg.com/sitemaps/media/audio/index.xml, https://www.bloomberg.com/sitemaps/people/profiles/index.xml, https://www.bloomberg.com/sitemaps/companies/public-company/index.xml, https://www.bloomberg.com/sitemaps/companies/private-company/index.xml, https://www.bloomberg.com/sitemaps/securites/index.xml, https://www.bloomberg.com/billionaires/sitemap.xml
- Disallow Rules Count
- 130 rules
View Raw robots.txt
# Bot rules: # 1. A bot may not injure a human being or, through inaction, allow a human being to come to harm. # 2. A bot must obey orders given it by human beings except where such orders would conflict with the First Law. # 3. A bot must protect its own existence as long as such protection does not conflict with the First or Second Law. # If you can read this then you should apply here https://www.bloomberg.com/careers/ User-agent: * Disallow: /polska Allow: /account/newsletters Disallow: /account/* Disallow: /tosv*.html Disallow: /search Disallow: /company/search/ Disallow: /professional/search/ Disallow: /impact/search/ Disallow: /ux/search/ Disallow: /wnwi/search/ Disallow: /gei/search/ Disallow: /impact/search/ Disallow: /netzeropathfinders/search/ Disallow: /notices/search/ Disallow: /distribution/search/ Disallow: /ukinnovators/search/ Disallow: /latam/search/ Disallow: /faq/search/ Disallow: /tc/search/ Disallow: /subscriptions/group/manage/ Disallow: /preview/lineup Disallow: /preview/articles Disallow: /explore/ Disallow: /press-releases/ Disallow: /artemis/ Disallow: /sessions-publisher/ User-agent: Google-Extended Disallow: / Allow: /professional Allow: /company Allow: /latam Allow: /faq Allow: /tc User-agent: Mediapartners-Google Disallow: /about/careers Disallow: /about/careers/ Disallow: /offlinemessage/ Disallow: /apps/fbk Disallow: /bb/newsarchive/ Disallow: /apps/news User-agent: Spinn3r Disallow: /podcasts/ Disallow: /feed/podcast/ Disallow: /bb/avfile/ User-agent: Googlebot-News Disallow: /sponsor/ Disallow: /news/sponsors/* Disallow: /news/terminal/* User-agent: Twitterbot Allow: /en/news/thp User-agent: CCBot Disallow: / # Development Tools User-agent: Python-urllib Disallow: / User-agent: python-requests Disallow: / User-agent: Python-http-client Disallow: / # AI/LLM Bots User-agent: ChatGPT-User Disallow: / Allow: /professional Allow: /company Allow: /latam Allow: /faq Allow: /tc User-agent: GPTBot Disallow: / Allow: /professional Allow: /company Allow: /latam Allow: /faq Allow: /tc User-agent: Claude-Web Disallow: / Allow: /professional Allow: /company Allow: /latam Allow: /faq Allow: /tc User-agent: anthropic-ai Disallow: / Allow: /professional Allow: /company Allow: /latam Allow: /faq Allow: /tc User-agent: PerplexityBot Disallow: / Allow: /professional Allow: /company Allow: /latam Allow: /faq Allow: /tc User-agent: YouBot Disallow: / Allow: /professional Allow: /company Allow: /latam Allow: /faq Allow: /tc User-agent: ClaudeBot Disallow: / Allow: /professional Allow: /company Allow: /latam Allow: /faq Allow: /tc User-agent: Claude-User Disallow: / Allow: /professional Allow: /company Allow: /latam Allow: /faq Allow: /tc User-agent: Claude-SearchBot Disallow: / Allow: /professional Allow: /company Allow: /latam Allow: /faq Allow: /tc User-agent: OAI-SearchBot Disallow: / Allow: /professional Allow: /company Allow: /latam Allow: /faq Allow: /tc User-agent: DuckAssistBot Disallow: / Allow: /professional Allow: /company Allow: /latam Allow: /faq Allow: /tc User-agent: cohere-ai Disallow: / # Google Services User-agent: Google-Apps Disallow: / User-agent: Google-Apps-Script Disallow: / User-agent: AppEngine-Google Disallow: / User-agent: Google-Cloud Disallow: / User-agent: Google-CloudVertexBot Disallow: / # Major Company Bots User-agent: AmazonBot Disallow: / User-agent: AmazonAdBot Disallow: / User-agent: ByteSpider Disallow: / User-agent: Meta-ExternalAgent Disallow: / User-agent: Meta-ExternalFetcher Disallow: / User-agent: Meta-ExternalAgent-Image Disallow: / User-agent: Applebot-Extended Disallow: / User-agent: Bytespider-Image Disallow: / # Feed & Content Aggregators User-agent: Feedly Disallow: / Allow: /professional Allow: /company Allow: /latam Allow: /faq Allow: /tc User-agent: FeedlyBot Disallow: / Allow: /professional Allow: /company Allow: /latam Allow: /faq Allow: /tc User-agent: FeedlyApp Disallow: / Allow: /professional Allow: /company Allow: /latam Allow: /faq Allow: /tc
robots.txt published
+2
Export & Share Intelligence
Download the complete official PDF verification report (all sections and technical signals expanded), or export raw JSON telemetry.
Scan Engine Performance
Automated multi-signal inspection pipeline
Signals Analyzed
35
This scan
Sources Checked
18
Live security feeds
Scan Duration
3.12s
Ultra-fast
Last Scan
9/5/2026
Live timestamp
Overall Risk
Low Risk