Skip to main content

Is glassdoor.com safe?

Very Likely Safe

No major red flags found. This looks like a legitimate, established website.

Popular site · #2,945 worldwideChecked Nov 13, 2026

Why: Main reasons: domain registered 23+ years ago; not flagged by Google Safe Browsing; popular website — ranked #2,945 worldwide. Minor issues: site returned HTTP 403; missing HSTS.

Identity & Age100/100
Impersonation Risk100/100
Red Flags100/100
Transparency70/100
Security95/100
Email100/100

Positive highlights

  • Domain registered 23+ years agoLong-established domains are far less likely to be disposable scams.
  • Not flagged by Google Safe BrowsingNo malware, phishing, or unwanted-software match in Google's live threat database.
  • HTTPS is enforcedAll redirects stayed on HTTPS. Traffic is encrypted end-to-end.
  • Popular website — ranked #2,945 worldwideListed in the Tranco top 1 million websites. Scam sites are almost never this popular.
  • HTTPS works with a valid certificateA secure connection was made on port 443. Certificate log details were unavailable at scan time.
  • No impersonation patterns detectedDomain doesn't look like a typosquat, doesn't embed a well-known brand, and uses ASCII characters.
  • Not listed on URLhaus malware blocklist
  • Fast response (8ms)
  • Not present in PhishStats phishing feed
  • DMARC published (quarantine)

Negative highlights

  • Site returned HTTP 403The server is reachable but did not return a success status.
  • Missing HSTSTells browsers to only use HTTPS for this domain.
  • Missing Content Security PolicyRestricts which scripts and resources the page can load.

Note: Registered via MarkMonitor Inc..

Note: 3 technologies detected. Svelte, Google Tag Manager, Cloudflare

Note: Policy pages could not be checked. The site showed our scanner a bot-check or short page, so privacy, terms and contact pages were not verified. This is common for large sites and is not counted against them.

Key facts about glassdoor.com

Website
glassdoor.com
Popularity
#2,945 worldwide (Tranco top 1M)
Domain created
May 22, 2003 (23.5 years old)
Domain expires
May 22, 2027
Registrar
MarkMonitor Inc.
Owner details
Public in WHOIS
IP address
104.18.39.196
Hosting / CDN
Cloudflare
SSL certificate
HTTPS works (certificate details unavailable)
Email security
SPF ✓ · DMARC ✓ (quarantine)
Threat blocklists
Not listed (clean)
Technology
Svelte, Google Tag Manager, Cloudflare

Summary

94/100 — trusted. Long-established domain (23.5 years old), clean threat reputation, no impersonation patterns.

No malware/phishing on feedsGood reputationHTTPS enabled

Full technical report

Domain Information

Registration timeline, age calculation, registrar details, and ICANN status.

Verified
Registrar Name
MarkMonitor Inc.
Creation Date
May 22, 2003 (23.5 years ago)
Last Updated
July 23, 2026
Registry Expiry Date
May 22, 2027
WHOIS Privacy Protection
Publicly Visible
Domain Status Codes
client delete prohibited, client transfer prohibited, client update prohibited, server delete prohibited, server transfer prohibited, server update prohibited
ICANN Status Badges
client delete prohibitedclient transfer prohibitedclient update prohibitedserver delete prohibitedserver transfer prohibitedserver update prohibited
Domain registered 23+ years ago
Long-established domains are far less likely to be disposable scams.
+15
Registered via MarkMonitor Inc.
Owner information disclosed
The domain publishes registrant contact info — a small positive transparency signal.
+2

HTTP Headers & Security

Full HTTP response headers, HSTS, Content Security Policy (CSP), and security baselines.

Warning
Security Header Baseline
Strict-Transport-SecurityMissing
Content-Security-PolicyMissing
X-Frame-Options Present
X-Content-Type-Options Present
Referrer-PolicyMissing
Permissions-PolicyMissing
Recommended Missing Headers
missing: HSTSmissing: Content Security Policy
All Response Headers (19)
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cf-mitigated: challenge
cf-ray: a59ee0770f703564-CMH
connection: close
content-length: 11695
content-type: text/html; charset=UTF-8
critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
date: Fri, 13 Nov 2026 15:40:45 GMT
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*
referrer-policy: same-origin
server: cloudflare
server-timing: chlray;desc="a59ee0770f703564"
set-cookie: __cf_bm=s8PjVXEBdg.v.p7TI3qJrhJof0SQniURjX1M7CqTRs4-1794584446.5631893-1.0.1.1-mpTFGVa801E9nyuhgJxU3FyWQ4kdavpgTq.bXlJM.Y3A18ZWHiUoXCHAKKqKwi4ypEgpWCsi4tJ16V_SAEPYZDGKXC_f.EBA30YkvNA_Xhyx.wxwIx8uqqUjPRrbrgRO; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=glassdoor.com; Expires=Fri, 13 Nov 2026 16:10:46 GMT
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
Missing HSTS
Tells browsers to only use HTTPS for this domain.
-4
Missing Content Security Policy
Restricts which scripts and resources the page can load.
-4
X-Frame-Options is set
Prevents clickjacking by disallowing framing.
+3
X-Content-Type-Options is set
Blocks MIME-sniffing browser attacks.
+2
Referrer Policy is set
Controls what referrer information is sent with requests.
+2
Permissions Policy is set
Restricts access to powerful browser features (camera, mic, etc.).
+2

DNS Records

Encrypted DoH resolution: A, AAAA, MX mail servers, authoritative NS, and TXT verification.

Resolved
IPv4 Addresses (A)
104.18.39.196, 172.64.148.60
IPv6 Addresses (AAAA)
None
Mail Servers (MX)
aspmx.l.google.com (Priority: 1), alt1.aspmx.l.google.com (Priority: 5), alt2.aspmx.l.google.com (Priority: 5), aspmx2.googlemail.com (Priority: 10), aspmx3.googlemail.com (Priority: 10)
Authoritative Nameservers (NS)
irma.ns.cloudflare.com, nitin.ns.cloudflare.com
TXT Records Found
31 TXT verification records
A Records (IPv4)
104.18.39.196172.64.148.60
TXT Verification Records
hj-ownership=R8g%1iH0B$Q4
apple-domain-verification=64AdZvYcRMLmNpje
MS=FB92FCCA9339EC64202A1A61A4C40DAC3CF4C272
canva-site-verification=MTx0nM4d1oXxAnDnPhxz0g
bw=ZufHYelbVh6fItIClGZ1qkn65XDPa7+hytEazD2RZeTh
astro-domain-verification=clzw81toh0ivs01k4ps2ms0gx
botify-site-verification=DAWL6UR0RAcywwqdLqit7YjDREHrfflX
mongodb-site-verification=W9fyc8dm7y8WDgQ3a3h4TLCnjHryNUcf
cursor-domain-verification-d6jk8s=pbDrxfJQAiDVlYDKVoivJegiS
teamviewer-sso-verification=554bca1e511d4df98ca6cb6bd9cf968d
citrix-verification-code=b35115b7-7f06-4ce0-a4b5-df389824a8ee
onetrust-domain-verification=d9cebd8ad86349c2b16d3c8dcf4d8dff
northpass-domain-verification=ae2a29d339e37ab7f51df4edeaf59a22
adobe-idp-site-verification=0531454b-53a9-4442-86eb-0464ba0d9992
spycloud-domain-verification=ce129f1c-1fb3-4ecc-8630-c57bc8b138f2
slack-domain-verification=NQ8P6nW87xCKPsJ6GQGH64EBctfxiVgqOxwHIV8J
google-site-verification=3FlSDZQbNVDhmwQ-aPfvAa7EJwwAx0StE9bnZcnjhxs
google-site-verification=3kLUwWj8VFYaMgMvr3cCMTrgiZ3eU9Xj4rZPIRL-RwQ
google-site-verification=5anJLuxPMoH708zUFDJIPAdNzypAEfjeNeSaAzw36y8
google-site-verification=A66_RY2PPnTCtP180Vlj5ZLAT8d75l-u817F19I60i4
google-site-verification=BiRNm_oluIwqQvPcUcK2cu1jjmaCLVZ4yHvJFTqTkbg
google-site-verification=fjWGdDYajSc37PnmqN6J39XlDhNroxwAx3vS5gKYSeo
google-site-verification=veRrmANFCnxZPI-yoZIxf5RAc9UU-kWPzBPV2gaITf0
google-site-verification=vuswXJ9Bby44tX15mxRAh0ZtqLrDaZO-161pETHYJ_w
atlassian-sending-domain-verification=b06bd434-3857-4f02-95c3-366d97e9a781
box-domain-verification=8599672de93cf7e55862018ad5d0ecfbb45e10a7bac98de2ad45f6c2972b572f
drift-domain-verification=c10f10feead85943c07ee093838d3368644ac1d5eb2c690233b20e4bdd37279d
atlassian-domain-verification=8ziIPagFPaYkHvMQmFOP/HBZFK/GxZpQNNl/J/S2kUDqiCNNnZyQam1dWF83hqbQ
atlassian-domain-verification=SyGIXNsJ1iwjQf8A9JkvsNernN1b48QorZYmim1OvyKEQYfaW2x51fqUYHGCxxVz
atlassian-domain-verification=n1WyLwaGKYv1iGVJ4lR7cmQnvEozcC2i82k7MPBB55guozVSV3l38lEMR24laLF0
v=spf1 include:_spf.google.com include:sendgrid.net include:_spf.salesforce.com include:mailsenders.netsuite.com -all
2 address record(s) resolved
+4
2 authoritative nameservers
+2

WHOIS & Identity Lookup

Domain ownership status, registry lifecycle, nameservers, and privacy redaction.

Found
Registrable Domain
glassdoor.com
Registrar Organization
MarkMonitor Inc.
WHOIS Privacy Status
Public Registration Data
Registry Status Codes
client delete prohibited, client transfer prohibited, client update prohibited, server delete prohibited, server transfer prohibited, server update prohibited
Delegated Authoritative Nameservers
irma.ns.cloudflare.com, nitin.ns.cloudflare.com
Registration Lifecycle
Registered: 2003 → Expires: 2027
Nameservers (NS)
irma.ns.cloudflare.comnitin.ns.cloudflare.com
Domain registered 23+ years ago
Long-established domains are far less likely to be disposable scams.
+15
Registered via MarkMonitor Inc.
Owner information disclosed
The domain publishes registrant contact info — a small positive transparency signal.
+2

Email Security & Deliverability

SPF record validation, DMARC policy enforcement, DKIM selectors, and MX reputation.

Protected
SPF Record
v=spf1 include:_spf.google.com include:sendgrid.net include:_spf.salesforce.com include:mailsenders.netsuite.com -all
DMARC Policy Mode
Policy: QUARANTINE
DMARC Raw Record
v=DMARC1; p=quarantine; rua=mailto:postmaster@glassdoor.com,mailto:cb4qpxh2@ag.us.dmarcian.com; pct=100;
DKIM Selectors Detected
default, google, s1, s2
Email Protection Summary: This domain has strong email authentication configured to prevent spammers from sending emails impersonating this brand.
SPF record published
+5
DMARC published (quarantine)
+4
DKIM configured (default, google, s1, s2)
+3

Threat Intelligence & Blocklists

Multi-source malware feeds (URLhaus), phishing checks (PhishStats, Safe Browsing), and typosquats.

Clean
URLhaus Malware
Clean / Not Listed
PhishStats Feed
Clean / Not Listed
Google Safe Browsing
Clean / Verified
Root Domain Label
glassdoor
Top-Level Domain (TLD)
.com (Standard TLD)
Punycode Obfuscation
No (Standard ASCII)
Homoglyph / Lookalike Script
No mixed scripts
Brand Match Analysis
No recognized brand impersonation
Typosquatting Risk
Clean
No impersonation patterns detected
Domain doesn't look like a typosquat, doesn't embed a well-known brand, and uses ASCII characters.
+8

Technology Stack & Metadata

Detected CMS, JavaScript frameworks, analytics tags, CDN providers, and page metadata.

Detected
Detected Technologies by Category
js
Svelte
analytics
Google Tag Manager
cdn
Cloudflare
Page Metadata & Fingerprint
HTML Title
Security | Glassdoor
Meta Description
—
Document Language
en
Character Encoding
utf-8
Viewport Setting
width=device-width,initial-scale=1
Generator Software
—
3 technologies detected
Svelte, Google Tag Manager, Cloudflare
Mobile viewport configured
+2

Page Performance & Compression

Server response time, content payload size, Brotli/Gzip compression, and caching rules.

8ms
Items to Fix & Optimize
Text compression (Brotli/Gzip)
MUCH NEEDEDEnable on server or CDN
Modern image formats (WebP/AVIF/SVG)
OPTIONALConvert heavy images to WebP/AVIF
Protocol
HTTP/2
Binary framing, multiplexed
Compression
NONE
No compression detected
Optimization Signals (From Detectable Headers & Assets)
Image Formats
Legacy / Unchecked
Transfer
Uncompressed
Transport
HTTP/2
These are server-side signals. Actual Core Web Vitals (LCP, INP, CLS) require real-user measurement via PageSpeed Insights.
Detected Asset & Image Formats
WebPAVIFSVGJPEGPNG
HTTP Response Time
8 ms
Payload Body Size
11.4 KB
Compression Status
Uncompressed
Cache Directives
Standard caching rules
No findings.

AI Content Safety & Red Flags

High-pressure language, payment gateway safety, disposable domain analysis, and deceptive tactics.

Safe
AI Content Evaluation

94/100 — trusted. Long-established domain (23.5 years old), clean threat reputation, no impersonation patterns. Main reasons: domain registered 23+ years ago; not flagged by Google Safe Browsing; popular website — ranked #2,945 worldwide. Minor issues: site returned HTTP 403; missing HSTS.

Payment Red Flags
None (No suspicious payment requests)
High-Pressure Language
None (No artificial urgency detected)
Disposable Domain Risk
No (Established infrastructure)
Text Scanned Depth
561 characters verified
No scam-correlated language found on the home page
No crypto-only / gift-card / wire-only payment demands, and no obvious urgency tactics.
+6

Server & Hosting Infrastructure

Primary IP address, web server software, CDN edge network, and redirect hop chain.

cloudflare
Primary Web Server
cloudflare
CDN / Cloud Provider
Cloudflare
Primary IP Address
104.18.39.196
HTTP Status Code
403 OK
Final Landing Destination
https://glassdoor.com/
Redirect Hop Count
0 hops
Site returned HTTP 403
The server is reachable but did not return a success status.
-6
HTTPS is enforced
All redirects stayed on HTTPS. Traffic is encrypted end-to-end.
+10
Fast response (8ms)
+6
Served through Cloudflare
Sites behind a major CDN benefit from DDoS protection and edge caching.
+4

SSL / TLS Certificate

Active Certificate Authority, Common Name, validity period, expiration countdown, and SANs.

Secure
Certificate Authority (Issuer)
Not available (certificate logs did not respond)
Subject Common Name (CN)
—
Validity Period
Not available
Subject Alternative Names (SANs)
1 domain protected
Certificates Logged (CT)
Verified in live TLS
Subject Alternative Names (Sample)
glassdoor.com
HTTPS works with a valid certificate
A secure connection was made on port 443. Certificate log details were unavailable at scan time.
+8

Content & Transparency Policies

Linked privacy policy, terms of service, about page, social channels, and published contacts.

Warning
Key Legal & Transparency Pages
privacy PageNot linked
terms PageNot linked
contact PageNot linked
about PageNot linked
refund PageNot linked
shipping PageNot linked
cookies PageNot linked
Published Phone Numbers
1.3 0-2.2-.7-2.2-3.1, 0-3.3 2.2-3.3 2 0 2 2.4, 5.4 0-6 2-6 6.6, 5.6-.2-5.8-2-5.8-6.5, 2 0-2.1 1.1-2.1 3.4, 3.5 0-5.8 2.3-5.8 6.7
Policy pages could not be checked
The site showed our scanner a bot-check or short page, so privacy, terms and contact pages were not verified. This is common for large sites and is not counted against them.

Robots.txt & Sitemap Discoverability

Search engine crawler directives, indexability, and declared XML sitemaps.

Present
Robots.txt Directives
Present & Configured
Sitemaps Declared
None in robots.txt
Disallow Rules Count
158 rules
View Raw robots.txt
# Greetings, human beings!,
#
# If you're sniffing around this file, and you're not a robot, we're looking to meet curious folks such as yourself.
#
# Think you have what it takes to join the best white-hat SEO growth hackers on the planet, and help improve the way people everywhere find jobs?
#
# Run - don't crawl - to apply to join Glassdoor's SEO team here http://jobs.glassdoor.com
#
#
#### Rules for ANY User-Agent
User-agent: *
Disallow: /*?*hostSite=*
Disallow: /1347171559/
Disallow: /about/board/
Disallow: /about/contact/
Disallow: /about/faq/
Disallow: /about/forCareerCenters/
Disallow: /about/forLibraries/
Disallow: /about/forStudents/
Disallow: /about/guidelines/
Disallow: /about/index/
Disallow: /about/jobs/
Disallow: /about/learn/
Disallow: /about/overview/
Disallow: /about/privacy/
Disallow: /about/syndicationCenter/
Disallow: /about/team/
Disallow: /about/terms/
Disallow: /about/widgetTerms/
Disallow: /ajax/
Disallow: /abtest
Disallow: /browse/
Disallow: /chat
Disallow: /Compare/choose
Disallow: /employerinfo/
Disallow: /employerInfo/
Disallow: /Explore/browse-companies
Disallow: /home/
Disallow: /integrations/facebook/glassdoor/eep
Disallow: /jobview/
Disallow: /legal/
Disallow: /lists/
Disallow: /more/
Disallow: /partner/
Disallow: /partner-center/
Disallow: /partners/company/
Disallow: /partners/insights/
Disallow: /partners/jobs/
Disallow: /partners/reports/
Disallow: /partners/resumeView
Disallow: /partners/settings/
Disallow: /parts
Disallow: /Polls
Disallow: /profile/
Allow:    /profile/login_input.htm
Allow:    /profile/joinNow_input.htm
Allow:    /member/profile/login
Allow:    /member/profile/joinNow
Disallow: /Resume/user-profile/
Disallow: /rss/*
Disallow: /search/
Disallow: /Search/
Disallow: /survey/
Disallow: /surveys
Disallow: /surveys/
Disallow: /util/
Disallow: /getAdSlotContentsAjax.htm
Disallow: /developer/index.htm
Disallow: /developer/widget/builder/
Disallow: /event-ingestion

Disallow: /employers/ec
Disallow: /employers/enhanced/billing_*
Disallow: /slink.htm
Disallow: /*encryptedUserId
Disallow: /*followId
Disallow: /*userValidationKey
Disallow: */trackClickAsync.htm

Disallow: /mz-survey/
Disallow: /user-activation/
Disallow: /member/
Disallow: /resume/build/
Disallow: /userprofile/
Disallow: /sourcing$
Disallow: /knowyourworth/
Disallow: /Reviews/index.htm?
Disallow: *filter.searchKeyword=

#logging related
Disallow: */lib$
Disallow: */lib/
Disallow: */globalize/
Disallow: */globalize$
Disallow: */ASCIISumThreshold$
Disallow: */LogClient$
Disallow: */MsgBuilder$
Disallow: */UserAgent$
Disallow: */Constants$
Disallow: */init/
Disallow: */init$
Disallow: */LogServer$
Disallow: */GDLogger$
Disallow: */gd-perf$
Disallow: */gd-site-hdr-dropdown$
Disallow: */bundles$
Disallow: */wait$
Disallow: */extend$
Disallow: */strings$
Disallow: */strings/
Disallow: */document$
Disallow: */*Ajax.htm
Disallow: */json$
Disallow: */json/

# Blocking track urls (ACQ-2468)
Disallow: /track

#Blocking non standard job view and job search URLs, and paginated job SERP URLs (TRFC-2831)

Disallow: /job-listing/*_IE*.htm
Disallow: /job-listing/JV.htm?*
Disallow: /Job/*_IP*

Disallow: /Job/bwl.htm

# TRFC-3125 Block 'sex jobs' jobs infosite pages from being indexed
Disallow: /Jobs/*-sex-*Jobs-EI*

# TRFC-4037 Block page from being indexed
Disallow: /Reviews/Barbizon-scam-*

# Block Pages with misaligned search intent, impacting site links SERP
Disallow: /Jobs/Glassdoor-Jobs-E100431.htm
Disallow: /Reviews/Glassdoor-Reviews-E100431.htm
Disallow: /Salary/Glassdoor-Salaries-E100431.htm
Disallow: /Reviews/EMPLOYERS-Reviews-E25702.htm
Disallow: /Reviews/Anonymous-Reviews-E5182641.htm
Disallow: /Salaries/search-salary-SRCH_KO0,6.htm

#Blocking low-traffic employer profile pages
Disallow: /Photos/
Disallow: /Location/All-*-Office-Locations*

# Block pages with low SEO potential to reduce crawling
Disallow: /Compare/*-vs-*
Disallow: /Salary/*_DEPT*
Disallow: /Interview/*_IL*

# Block specific query filter parameters
Disallow
robots.txt published
+2

Export & Share Intelligence

Download the complete official PDF verification report (all sections and technical signals expanded), or export raw JSON telemetry.

Scan Engine Performance

Automated multi-signal inspection pipeline

v5.1.0 Engine
Signals Analyzed
32
This scan
Sources Checked
19
Live security feeds
Scan Duration
3.59s
Full live scan
Last Scan
11/13/2026
Live timestamp
Overall Risk
Low Risk

User reviews of glassdoor.com

Used glassdoor.com? Share your experience to help others. Plain text only — links are not allowed.

(optional)
0/1000 · min 15 characters

No reviews yet. Be the first to share your experience.