Scam Lookup
Automated Website Trust & Risk Intelligence Report
https://scamlookup.net/website/homedepot.com
Generated: Fri, 13 Nov 2026 15:42:35 GMT
Target Website: homedepot.com
Overall Trust Score: 92/100 (Trusted)
Is homedepot.com safe?
Very Likely Safe
No major red flags found. This looks like a legitimate, established website.
Popular site · #760 worldwideChecked Nov 13, 2026
92
Trust score
Why: Main reasons: domain registered 34+ years ago; not flagged by Google Safe Browsing; popular website — ranked #760 worldwide. Minor issues: missing Content Security Policy; page has no <title>.
Identity & Age100/100
Impersonation Risk100/100
Red Flags100/100
Transparency70/100
Security90/100
Email100/100
Positive highlights
- Domain registered 34+ years agoLong-established domains are far less likely to be disposable scams.
- Not flagged by Google Safe BrowsingNo malware, phishing, or unwanted-software match in Google's live threat database.
- HTTPS is enforcedAll redirects stayed on HTTPS. Traffic is encrypted end-to-end.
- Popular website — ranked #760 worldwideListed in the Tranco top 1 million websites. Scam sites are almost never this popular.
- Site responded with 200Final URL: https://www.homedepot.com/. Response time 518ms.
- HTTPS works with a valid certificateA secure connection was made on port 443. Certificate log details were unavailable at scan time.
- No impersonation patterns detectedDomain doesn't look like a typosquat, doesn't embed a well-known brand, and uses ASCII characters.
- Not listed on URLhaus malware blocklist
- Not present in PhishStats phishing feed
- HSTS is setTells browsers to only use HTTPS for this domain.
Negative highlights
- Missing Content Security PolicyRestricts which scripts and resources the page can load.
- Page has no <title>Well-maintained sites always set a page title.
- Large response served uncompressedEnable gzip or brotli at the edge to cut transfer size dramatically.
Note: Registered via CSC Corporate Domains, Inc..
Note: 3 technologies detected. Svelte, Google Analytics, Cloudflare
Note: Policy pages could not be checked. The site showed our scanner a bot-check or short page, so privacy, terms and contact pages were not verified. This is common for large sites and is not counted against them.
Key facts about homedepot.com
- Website
- homedepot.com
- Popularity
- #760 worldwide (Tranco top 1M)
- Domain created
- Aug 4, 1992 (34.3 years old)
- Domain expires
- Aug 3, 2027
- Registrar
- CSC Corporate Domains, Inc.
- Owner details
- Public in WHOIS
- IP address
- 35.201.95.83
- Hosting / CDN
- Cloudflare
- SSL certificate
- HTTPS works (certificate details unavailable)
- Email security
- SPF ✓ · DMARC ✓ (reject)
- Threat blocklists
- Not listed (clean)
- Technology
- Svelte, Google Analytics, Cloudflare
Summary
92/100 — trusted. Long-established domain (34.3 years old), clean threat reputation, no impersonation patterns.
No malware/phishing on feedsGood reputationHTTPS enabled
Full technical report
Domain Information
Registration timeline, age calculation, registrar details, and ICANN status.
Verified
- Registrar Name
- CSC Corporate Domains, Inc.
- Creation Date
- August 4, 1992 (34.3 years ago)
- Last Updated
- July 30, 2026
- Registry Expiry Date
- August 3, 2027
- WHOIS Privacy Protection
- Publicly Visible
- Domain Status Codes
- client transfer prohibited, server delete prohibited, server transfer prohibited, server update prohibited
ICANN Status Badges
client transfer prohibitedserver delete prohibitedserver transfer prohibitedserver update prohibited
Domain registered 34+ years ago
Long-established domains are far less likely to be disposable scams.
+15
Registered via CSC Corporate Domains, Inc.
Owner information disclosed
The domain publishes registrant contact info — a small positive transparency signal.
+2
HTTP Headers & Security
Full HTTP response headers, HSTS, Content Security Policy (CSP), and security baselines.
Warning
Security Header Baseline
Strict-Transport-SecurityMissing
Content-Security-PolicyMissing
X-Frame-OptionsMissing
X-Content-Type-Options Present
Referrer-PolicyMissing
Permissions-PolicyMissing
Recommended Missing Headers
missing: Content Security Policymissing: X-Frame-Optionsmissing: Referrer Policymissing: Permissions Policy
All Response Headers (28)
akamai-grn: 0.90293417.1794584555.8d5160b akamai-request-bc: [a=23.52.41.144,b=148182539,c=g,n=US_IL_CHICAGO,o=20940] cf-cache-status: DYNAMIC cf-ray: a59ee31e8f39b86e-CMH connection: close content-type: text/html; charset=utf-8 date: Fri, 13 Nov 2026 15:42:35 GMT expect-ct: max-age=0 grace: none link: <https://client.px-cloud.net>;rel="preconnect",<https://dam.thdstatic.com>;rel="preconnect",<https://cdn.quantummetric.com>;rel="preconnect",<https://js-agent.newrelic.com>;rel="preconnect",<https://cdn.revjet.com>;rel="preconnect",<https://images.thdstatic.com>;rel="preconnect",<https://siteintercept.qualtrics.com>;rel="preconnect",<https://contentgrid.thdstatic.com>;rel="preconnect", <https://assets.thdstatic.com>;rel="preconnect",<https://tag.getamigo.io>;rel="preconnect" server: cloudflare server-timing: cdn-cache; desc=HIT, edge; dur=16, ak_p; desc="1794584555332_389294480_148182539_1598_33004_20_24_15";dur=1 set-cookie: akacd_usbeta=3972037354~rv=75~id=b9ad7620c7e8d93ea81d2f29f88f0934; path=/; Secure; SameSite=None strict-transport-security: max-age=63072000; includeSubDomains transfer-encoding: chunked vary: Accept-Encoding x-akamai-transformed: 9 - 0 pmb=mRUM,2 x-application-context: render-nonbuyable:undefined:my-homepage:default x-content-type-options: nosniff x-device-type: desktop x-dns-prefetch-control: on x-download-options: noopen x-permitted-cross-domain-policies: none x-proto: secure x-varnish: 4237618 4462593 x-varnish-cache: HIT(242)@vdir x-varnish-esi: true x-xss-protection: 0
HSTS is set
Tells browsers to only use HTTPS for this domain.
+6
Missing Content Security Policy
Restricts which scripts and resources the page can load.
-4
Missing X-Frame-Options
Prevents clickjacking by disallowing framing.
-3
X-Content-Type-Options is set
Blocks MIME-sniffing browser attacks.
+2
Missing Referrer Policy
Controls what referrer information is sent with requests.
-2
Missing Permissions Policy
Restricts access to powerful browser features (camera, mic, etc.).
-2
DNS Records
Encrypted DoH resolution: A, AAAA, MX mail servers, authoritative NS, and TXT verification.
Resolved
- IPv4 Addresses (A)
- 35.201.95.83
- IPv6 Addresses (AAAA)
- None
- Mail Servers (MX)
- mxb-000e6608.gslb.pphosted.com (Priority: 10), mxa-000e6608.gslb.pphosted.com (Priority: 10), mx0a-000e6608.pphosted.com (Priority: 20), mx0b-000e6608.pphosted.com (Priority: 20), exchanger1.homedepot.com (Priority: 30), exchanger2.homedepot.com (Priority: 30)
- Authoritative Nameservers (NS)
- a1-27.akam.net, a16-66.akam.net, a3-64.akam.net, a18-67.akam.net, a7-66.akam.net, a6-65.akam.net
- TXT Records Found
- 24 TXT verification records
A Records (IPv4)
35.201.95.83
TXT Verification Records
Dynatrace-site-verification=5218cc8f-b799-466b-81e2-151902ea9493__b7hius6gka10pcd61m5vcgio0c
OSIAGENTREGURL=https://mdm.homedepot.com/athena/enrollment/athenaiosenroll.aspx
google-site-verification=dtvgbq00CxnP6nJC7dgLEOVtLcoKKXtdj90AImFCbuM
smartsheet-site-validation=UQZXQ9whIKMhr-lD3a9QxQbUGhnacn2o
b93b75bb-c0c7-445c-89eb-8560cef8dba9
pendo-domain-verification=6163daa5-67e0-4c5d-9607-d97d6a0c9ab4
google-site-verification=3NvwcCmI2tiaqvhxEx918MCg-AfY9OOwxB3NpSQwTjw.
adobe-idp-site-verification=3fbd7a09e2fe24031aad0a4a8c68e8242e227010cef9e40aeebcf4bc7addb8a0
ms-domain-verification=3a3a542a-71c8-45ad-ab04-7152bfba2a64
liveramp-site-verification=C7ahcr0qXYCzwhdiK-pcYbtLNhwzEvcgbvbgjovyRy0
mk-org-sso-967a2df0-7b8d-405b-b414-4627a3d6311e
vmware-cloud-verification-e1ffc876-3a8b-4242-94c1-9e8db12d03f1
v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ip4:208.56.10.127 ip4:208.56.14.99 ip4:148.163.149.217 ip4:148.163.153.207 include:mail.zendesk.com ~all
bv-domain-verification=e51f90f4244f97973230f42f1a8485fc03995b331b6a856ee883e72624c85d3d
ciscocidomainverification=2a19d56e7ed441cd6cd10c84d904c0f8828fba1455df76c984284b5d85fa5c2e
google-site-verification=94tM-sDACvy_JNGSU6fp8GOaI6k5OuzXZN8PPYCtdRI
hj-ownership=a4r4Ms7CqBFe1WU
ms-domain-verification=1851d99d-d9bb-4eb8-b800-8e86a71b0fcc
18aa0eb980e5432c9ac85035050b628
astro-domain-verification=cmqshn0vh1hv101nynj90s660
onetrust-domain-verification=9be9c479e03f424d939ac18286224476
google-site-verification=wpZpi9YRPHBYFY7AfQOaVZSOnXuiN_LYpOsuCJRiEyQ
atlassian-domain-verification=xqfqkDq+B7CyObHlKTiLqquR1QTlpKQeek64YJoRwFWeUm0Tihwqz8GA0enUIHSs
pardot757373=218869be8ba439583983ba0ae0f7bfe67956ead606a3deb3f20bdfc1fd42b8cd
1 address record(s) resolved
+4
6 authoritative nameservers
+2
WHOIS & Identity Lookup
Domain ownership status, registry lifecycle, nameservers, and privacy redaction.
Found
- Registrable Domain
- homedepot.com
- Registrar Organization
- CSC Corporate Domains, Inc.
- WHOIS Privacy Status
- Public Registration Data
- Registry Status Codes
- client transfer prohibited, server delete prohibited, server transfer prohibited, server update prohibited
- Delegated Authoritative Nameservers
- a1-27.akam.net, a16-66.akam.net, a18-67.akam.net, a3-64.akam.net, a6-65.akam.net, a7-66.akam.net
- Registration Lifecycle
- Registered: 1992 → Expires: 2027
Nameservers (NS)
a1-27.akam.neta16-66.akam.neta18-67.akam.neta3-64.akam.neta6-65.akam.neta7-66.akam.net
Domain registered 34+ years ago
Long-established domains are far less likely to be disposable scams.
+15
Registered via CSC Corporate Domains, Inc.
Owner information disclosed
The domain publishes registrant contact info — a small positive transparency signal.
+2
Email Security & Deliverability
SPF record validation, DMARC policy enforcement, DKIM selectors, and MX reputation.
Protected
- SPF Record
- v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ip4:208.56.10.127 ip4:208.56.14.99 ip4:148.163.149.217 ip4:148.163.153.207 include:mail.zendesk.com ~all
- DMARC Policy Mode
- Policy: REJECT
- DMARC Raw Record
- v=DMARC1; p=reject; fo=1; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com;
- DKIM Selectors Detected
- selector1
Email Protection Summary: This domain has strong email authentication configured to prevent spammers from sending emails impersonating this brand.
SPF record published
+5
DMARC published (reject)
+6
DKIM configured (selector1)
+3
Threat Intelligence & Blocklists
Multi-source malware feeds (URLhaus), phishing checks (PhishStats, Safe Browsing), and typosquats.
Clean
URLhaus Malware
Clean / Not Listed
PhishStats Feed
Clean / Not Listed
Google Safe Browsing
Clean / Verified
- Root Domain Label
- homedepot
- Top-Level Domain (TLD)
- .com (Standard TLD)
- Punycode Obfuscation
- No (Standard ASCII)
- Homoglyph / Lookalike Script
- No mixed scripts
- Brand Match Analysis
- No recognized brand impersonation
- Typosquatting Risk
- Clean
No impersonation patterns detected
Domain doesn't look like a typosquat, doesn't embed a well-known brand, and uses ASCII characters.
+8
Technology Stack & Metadata
Detected CMS, JavaScript frameworks, analytics tags, CDN providers, and page metadata.
Detected
Detected Technologies by Category
js
Svelte
analytics
Google Analytics
cdn
Cloudflare
Page Metadata & Fingerprint
- HTML Title
- —
- Meta Description
- —
- Document Language
- en
- Character Encoding
- UTF-8
- Viewport Setting
- width=device-width, initial-scale=1.0
- Generator Software
- —
3 technologies detected
Svelte, Google Analytics, Cloudflare
Mobile viewport configured
+2
Page has no <title>
Well-maintained sites always set a page title.
-3
Missing meta description
-2
Page Performance & Compression
Server response time, content payload size, Brotli/Gzip compression, and caching rules.
518ms
Items to Fix & Optimize
Text compression (Brotli/Gzip)
MUCH NEEDEDEnable on server or CDN
Modern image formats (WebP/AVIF/SVG)
OPTIONALConvert heavy images to WebP/AVIF
Protocol
HTTP/2
Binary framing, multiplexed
Compression
NONE
No compression detected
Optimization Signals (From Detectable Headers & Assets)
Image Formats
Legacy / Unchecked
Transfer
Uncompressed
Transport
HTTP/2
These are server-side signals. Actual Core Web Vitals (LCP, INP, CLS) require real-user measurement via PageSpeed Insights.
Detected Asset & Image Formats
WebPAVIFSVGJPEGPNG
- HTTP Response Time
- 518 ms
- Payload Body Size
- 1241.8 KB
- Compression Status
- Uncompressed
- Cache Directives
- Standard caching rules
Large response served uncompressed
Enable gzip or brotli at the edge to cut transfer size dramatically.
-3
AI Content Safety & Red Flags
High-pressure language, payment gateway safety, disposable domain analysis, and deceptive tactics.
Safe
AI Content Evaluation
92/100 — trusted. Long-established domain (34.3 years old), clean threat reputation, no impersonation patterns. Main reasons: domain registered 34+ years ago; not flagged by Google Safe Browsing; popular website — ranked #760 worldwide. Minor issues: missing Content Security Policy; page has no <title>.
- Payment Red Flags
- None (No suspicious payment requests)
- High-Pressure Language
- None (No artificial urgency detected)
- Disposable Domain Risk
- No (Established infrastructure)
- Text Scanned Depth
- 48,045 characters verified
No scam-correlated language found on the home page
No crypto-only / gift-card / wire-only payment demands, and no obvious urgency tactics.
+6
Server & Hosting Infrastructure
Primary IP address, web server software, CDN edge network, and redirect hop chain.
cloudflare
- Primary Web Server
- cloudflare
- CDN / Cloud Provider
- Cloudflare
- Primary IP Address
- 35.201.95.83
- HTTP Status Code
- 200 OK
- Final Landing Destination
- https://www.homedepot.com/
- Redirect Hop Count
- 1 hop
Redirect Hop Chain
- 1.https://homedepot.com/ → https://www.homedepot.com/
Site responded with 200
Final URL: https://www.homedepot.com/. Response time 518ms.
+8
HTTPS is enforced
All redirects stayed on HTTPS. Traffic is encrypted end-to-end.
+10
Served through Cloudflare
Sites behind a major CDN benefit from DDoS protection and edge caching.
+4
SSL / TLS Certificate
Active Certificate Authority, Common Name, validity period, expiration countdown, and SANs.
Secure
- Certificate Authority (Issuer)
- Not available (certificate logs did not respond)
- Subject Common Name (CN)
- —
- Validity Period
- Not available
- Subject Alternative Names (SANs)
- 1 domain protected
- Certificates Logged (CT)
- Verified in live TLS
Subject Alternative Names (Sample)
homedepot.com
HTTPS works with a valid certificate
A secure connection was made on port 443. Certificate log details were unavailable at scan time.
+8
Content & Transparency Policies
Linked privacy policy, terms of service, about page, social channels, and published contacts.
Warning
Key Legal & Transparency Pages
privacy PageNot linked
terms PageNot linked
contact PageNot linked
about PageNot linked
refund PageNot linked
shipping PageNot linked
cookies PageNot linked
Verified Social Channels
- Published Phone Numbers
- 8.3333333333, 16.6666666667, 33.3333333333, 41.6666666667, 58.3333333333, 66.6666666667
Policy pages could not be checked
The site showed our scanner a bot-check or short page, so privacy, terms and contact pages were not verified. This is common for large sites and is not counted against them.
Robots.txt & Sitemap Discoverability
Search engine crawler directives, indexability, and declared XML sitemaps.
Present
- Robots.txt Directives
- Present & Configured
- Sitemaps Declared
- https://www.homedepot.com/sitemap/main.xml
- Disallow Rules Count
- 45 rules
View Raw robots.txt
# robots.txt for https://www.homedepot.com/ User-agent: * Disallow: /*SiteMapView* Disallow: /*Navigation?Ns=P_Topseller_Sort|style=List* Disallow: /*Navigation?Ns=P_Topseller_Sort|style=A* Disallow: /*CheckoutSignIn* Disallow: /*OrderItemUpdate* Disallow: /*THDLogon* Disallow: /*ShippingMethod* Disallow: /*OrderItemDisplayViewShiptoAssoc* Disallow: /*DeliveryCalendar* Disallow: /*OrderItemAdd* Disallow: /*MoreViewsPage* Disallow: /*Search?* Disallow: /*NCNI-5* Disallow: /*recordCompareList* Disallow: /*PLP_Overlay* Disallow: /*Ntt-* Disallow: /*Ntk-* Disallow: /*AjaxNavigation* Disallow: /*Fragments/ Disallow: /s/ Disallow: /p/qv/ Disallow: /*OnlineAccount* Disallow: /*mycart* Disallow: /*mycheckout* Disallow: /*usebeta* Disallow: /canvas/ Disallow: /pep/ Disallow: /auth/view/signin?redirect=* Disallow: /auth/view/createaccount?redirect=* Disallow: /clickstream-producer/v1/publish Disallow: /l/search/* Disallow: /l/detail/* Disallow: /b/Featured-Products* Disallow: /compare?* Disallow: /schedule-a-measure/ Disallow: /services/*/reviews/page/* Allow: /services/*/reviews/page/1$ Disallow: /e/ Disallow: /custom-blinds/Configurator* Disallow: /cart$ Disallow: /cart/ Disallow: /cart* Disallow: /checkout* Disallow: /order-confirmation* Disallow: /customer/account/v1/citi/renderFormParameters Disallow: /list/view/details/* Sitemap: https://www.homedepot.com/sitemap/main.xml
robots.txt published
+2
Export & Share Intelligence
Download the complete official PDF verification report (all sections and technical signals expanded), or export raw JSON telemetry.
Scan Engine Performance
Automated multi-signal inspection pipeline
Signals Analyzed
33
This scan
Sources Checked
19
Live security feeds
Scan Duration
3.80s
Full live scan
Last Scan
11/13/2026
Live timestamp
Overall Risk
Low Risk
User reviews of homedepot.com
No reviews yet. Be the first to share your experience.