Scam Lookup
Automated Website Trust & Risk Intelligence Report
https://scamlookup.net/website/lastpass
Generated: Sat, 05 Sep 2026 10:53:17 GMT
Target Website: lastpass.com
Overall Trust Score: 96/100 (Trusted)
lastpass.com
Trusted
Scanned: Sep 5, 10:53 AMTRUST SCORE
96
CONFIDENT
Low Risk
96/100
TRUST SCORE
CONFIDENT
Low Risk
SAFETY
100/100
100/100
TRANSPARENCY
95/100
95/100
DOMAIN RISK
LowLow Tier
LowRisk
SSL SECURITY
100/100
100/100
PAYMENT RISK
NoNo Risk
NoRisk
VERDICT
Trusted
Trusted
AI Security Summary
96/100 — trusted. Long-established domain (21.5 years old), clean threat reputation, no impersonation patterns. Verdict driven by: slow response (3610ms); large response served uncompressed — worth extra caution before trusting.
No malware/phishing on feedsGood reputationHTTPS enabled
HTTPS & SSL
SecureSecure
Standard Trusted CA
Threat Status
CleanClean
No blacklists or malware
Domain Age
21.5 years21.5 years
Registered 3/8/2005
Reputation
High TrustHigh Trust
Based on 65+ verified signals
IP & Server
23.54.42.4823.54.42.48
cloudflare
Email Security
ProtectedProtected
SPF, DMARC, MX active
Performance
34 / 10034 / 100
Standard speed
Redirects
2 Hops2 Hops
Redirect chain analyzed
Top Priority RecommendationAction Needed
Slow response (3610ms)
Users typically bounce after 3 seconds.
Why it matters
Addressing this signal prevents trust downgrades and potential security risks.
View Glossary GuidePositive Signals
- Site responded with 200
- HTTPS is enforced
- Served through Cloudflare
- 1 address record(s) resolved
- 6 authoritative nameservers
- Domain registered 22+ years ago
- Owner information disclosed
- HTTPS encryption active & verified
Warnings
- Slow response (3610ms)
- Large response served uncompressed
Critical Issues
No critical issues found
Domain passes all high-risk checks
- Registrar Name
- CSC Corporate Domains, Inc.
- Creation Date
- March 8, 2005 (21.5 years ago)
- Last Updated
- July 28, 2025
- Registry Expiry Date
- January 2, 2028
- WHOIS Privacy Protection
- Publicly Visible
- Domain Status Codes
- client transfer prohibited
ICANN Status Badges
client transfer prohibited
Domain registered 22+ years ago
Long-established domains are far less likely to be disposable scams.
+15
Registered via CSC Corporate Domains, Inc.
Owner information disclosed
The domain publishes registrant contact info — a small positive transparency signal.
+2
Security Header Baseline
Strict-Transport-SecurityMissing
Content-Security-PolicyMissing
X-Frame-Options Present
X-Content-Type-Options Present
Referrer-PolicyMissing
Permissions-PolicyMissing
Recommended Missing Headers
missing: Referrer Policymissing: Permissions Policy
All Response Headers (20)
HSTS is set
Tells browsers to only use HTTPS for this domain.
+6
Content Security Policy is set
Restricts which scripts and resources the page can load.
+5
X-Frame-Options is set
Prevents clickjacking by disallowing framing.
+3
X-Content-Type-Options is set
Blocks MIME-sniffing browser attacks.
+2
Missing Referrer Policy
Controls what referrer information is sent with requests.
-2
Missing Permissions Policy
Restricts access to powerful browser features (camera, mic, etc.).
-2
- IPv4 Addresses (A)
- 23.54.42.48
- IPv6 Addresses (AAAA)
- None
- Mail Servers (MX)
- lastpass-com.mail.protection.outlook.com (Priority: 0)
- Authoritative Nameservers (NS)
- a2-65.akam.net, a12-67.akam.net, a18-64.akam.net, a7-67.akam.net, a3-66.akam.net, a1-208.akam.net
- TXT Records Found
- 23 TXT verification records
A Records (IPv4)
23.54.42.48
TXT Verification Records
_globalsign-domain-verification=7rP1sEOfyqI04YKonw7otfhGofXZW7FC5GOH43ewdX
apple-domain-verification=IyOyyg0XNDvilS5K
canva-site-verification=yBmAtNvte4fkx-NTjp9fUA
anthropic-domain-verification-ymwd7y=gVl2T34gP935WDJh6AvlyXgJ5
slack-domain-verification=FVkQ2U54VbZ33xj3Uao4YgrEoFMJvA3YtCESGIVF
docker-verification=998b0f8d-f5d7-4805-a745-e0be96f26cd8
adobe-idp-site-verification=e74cde664e208017bf9ad538c75ef7c0818a4e92b88dab7819006590d5f23c8b
docusign=065ffd69-86dd-480a-b763-08b5e883e419
drift-domain-verification=7adf9fb3d85ce834bdbf42e67f1a2de96409ecbe048f896768faf1c3596f6186
jetbrains-domain-verification=dor7koe5f5adic2bzd22c2hko
heygen-verification=cqrwurew42dyga2wozoo1c4jcc8vvdoj
parallels-domain-verification=a7c495c92f264e75a4e76c90aae0920899ef0c514caa4762b880b33e2c0fe2d6
google-site-verification=VR9wReUU43jkh1x1QDkGQ-R_QD-bA30UyVt8VojnL9Q
wiz-domain-verification=ab1f76c523e9fcb77962f0c5864b1841cf727a1a79831a61564ec4670738173a
twilio-domain-verification=b632fc0ce1376b40a8a5be2a247bbfd1
globalsign-domain-verification=PyOpglfYHRIunrSa7GLznK8LqvWGyFSfh/O+qtNQvuM=" "MS=ms57895611
MS=ms83796561
google-site-verification=2RWu_8euotL3Owoc4OIOJHuxlOWNkZK4Zcn0ntXxGLc
miro-verification=88bfcf1a779dd19255e9c4f29499682b1f8666fd
v=spf1 redirect=lastpass.com.hosted.spf-report.com
atlassian-domain-verification=cmQzdzcdpf5BJscQ99l/efuaA1t0Bc7fkBHRWjLonXXcE7jBLUobeEBVba9a7IVh
jamf-site-verification=Noq7sI1rhvZG3_tA2qFsxA
reachdesk-verification=9onMbk6Hor8b63tWd2jHG9imyq6DXNMp3KE95mYfxHrUZ9eYNa12IauKmWzcrPwb
1 address record(s) resolved
+4
6 authoritative nameservers
+2
- Registrable Domain
- lastpass.com
- Registrar Organization
- CSC Corporate Domains, Inc.
- WHOIS Privacy Status
- Public Registration Data
- Registry Status Codes
- client transfer prohibited
- Delegated Authoritative Nameservers
- a1-208.akam.net, a12-67.akam.net, a18-64.akam.net, a2-65.akam.net, a3-66.akam.net, a7-67.akam.net
- Registration Lifecycle
- Registered: 2005 → Expires: 2028
Nameservers (NS)
a1-208.akam.neta12-67.akam.neta18-64.akam.neta2-65.akam.neta3-66.akam.neta7-67.akam.net
Domain registered 22+ years ago
Long-established domains are far less likely to be disposable scams.
+15
Registered via CSC Corporate Domains, Inc.
Owner information disclosed
The domain publishes registrant contact info — a small positive transparency signal.
+2
- SPF Record
- v=spf1 redirect=lastpass.com.hosted.spf-report.com
- DMARC Policy Mode
- Policy: REJECT
- DMARC Raw Record
- v=DMARC1; p=reject; sp=reject; rua=mailto:3b91c1c0@mxtoolbox.dmarc-report.com,mailto:dmarc_agg@vali.email,mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:3b91c1c0@forensics.dmarc-report.com,mailto:lastpass-dmarc@datafeeds.phishlabs.com," "mailto:dmarc_ruf@emaildefense.proofpoint.com; adkim=r; aspf=r; fo=1; rf=afrf; pct=100; ri=86400
- DKIM Selectors Detected
- google, selector1
Email Protection Summary: This domain has strong email authentication configured to prevent spammers from sending emails impersonating this brand.
SPF record published
+5
DMARC published (reject)
+6
DKIM configured (google, selector1)
+3
URLhaus Malware
Clean / Not Listed
PhishStats Feed
Clean / Not Listed
Google Safe Browsing
Not checked
- Root Domain Label
- lastpass
- Top-Level Domain (TLD)
- .com (Standard TLD)
- Punycode Obfuscation
- No (Standard ASCII)
- Homoglyph / Lookalike Script
- No mixed scripts
- Brand Match Analysis
- No recognized brand impersonation
- Typosquatting Risk
- Clean
No impersonation patterns detected
Domain doesn't look like a typosquat, doesn't embed a well-known brand, and uses ASCII characters.
+8
Detected Technologies by Category
js
Svelte
css
Tailwind CSS
analytics
Google AnalyticsGoogle Tag Manager
cdn
Cloudflare
Page Metadata & Fingerprint
- HTML Title
- Business Password Management - LastPass Business
- Meta Description
- Comprehensive password management for business that integrates secure access and advanced authentication for complete control and visibility. Fits businesses of all sizes!
- Document Language
- en
- Character Encoding
- utf-8
- Viewport Setting
- width=device-width, initial-scale=1
- Generator Software
- —
5 technologies detected
Svelte, Tailwind CSS, Google Analytics, Google Tag Manager, Cloudflare
Mobile viewport configured
+2
Items to Fix & Optimize
Text compression (Brotli/Gzip)
MUCH NEEDEDEnable on server or CDN
Modern image formats (WebP/AVIF/SVG)
OPTIONALConvert heavy images to WebP/AVIF
Protocol
HTTP/2
Binary framing, multiplexed
Compression
NONE
No compression detected
Optimization Signals (From Detectable Headers & Assets)
Image Formats
Legacy / Unchecked
Transfer
Uncompressed
Transport
HTTP/2
These are server-side signals. Actual Core Web Vitals (LCP, INP, CLS) require real-user measurement via PageSpeed Insights.
Detected Asset & Image Formats
WebPAVIFSVGJPEGPNG
- HTTP Response Time
- 3610 ms
- Payload Body Size
- 221.4 KB
- Compression Status
- Uncompressed
- Cache Directives
- max-age=0, no-cache, no-store
Large response served uncompressed
Enable gzip or brotli at the edge to cut transfer size dramatically.
-3
AI Content Evaluation
96/100 — trusted. Long-established domain (21.5 years old), clean threat reputation, no impersonation patterns. Verdict driven by: slow response (3610ms); large response served uncompressed — worth extra caution before trusting.
- Payment Red Flags
- None (No suspicious payment requests)
- High-Pressure Language
- None (No artificial urgency detected)
- Disposable Domain Risk
- No (Established infrastructure)
- Text Scanned Depth
- 19,795 characters verified
No scam-correlated language found on the home page
No crypto-only / gift-card / wire-only payment demands, and no obvious urgency tactics.
+6
- Primary Web Server
- cloudflare
- CDN / Cloud Provider
- Cloudflare
- Primary IP Address
- 23.54.42.48
- HTTP Status Code
- 200 OK
- Final Landing Destination
- https://www.lastpass.com/hp/business
- Redirect Hop Count
- 2 hops
Redirect Hop Chain
- 1.https://lastpass.com/ → https://www.lastpass.com/
- 2.https://www.lastpass.com/ → https://www.lastpass.com/hp/business
Site responded with 200
Final URL: https://www.lastpass.com/hp/business. Response time 3610ms.
+8
HTTPS is enforced
All redirects stayed on HTTPS. Traffic is encrypted end-to-end.
+10
Slow response (3610ms)
Users typically bounce after 3 seconds.
-5
Served through Cloudflare
Sites behind a major CDN benefit from DDoS protection and edge caching.
+4
- Certificate Authority (Issuer)
- Standard Trusted CA
- Subject Common Name (CN)
- lastpass.com
- Validity Period
- 60 days remaining (Expires: 2026-11-04T10:53:20.711Z)
- Subject Alternative Names (SANs)
- 1 domain protected
- Certificates Logged (CT)
- 1 certs recorded
Subject Alternative Names (Sample)
lastpass.com
HTTPS encryption active & verified
Live TLS connection established successfully on port 443 with valid cipher suites.
+8
Key Legal & Transparency Pages
- Published Phone Numbers
- 095053424, 12052026204139, 15505579979, 7436256379, 9151207424, 4221783458
Privacy policy linked from home page
+6
Terms of service linked from home page
+5
Contact page linked from home page
+5
About page linked from home page
+3
No refund/return policy found
Reputable sites usually publish a refund/return policy.
-3
No cookie policy found
Reputable sites usually publish a cookie policy.
-2
3 social profile(s) linked
twitter, facebook, instagram
+3
Phone number published
+2
- Robots.txt Directives
- Not Found
- Sitemaps Declared
- None in robots.txt
- Disallow Rules Count
- 0 rules
No findings.
Export & Share Intelligence
Download the complete official PDF verification report (all sections and technical signals expanded), or export raw JSON telemetry.
Scan Engine Performance
Automated multi-signal inspection pipeline
Signals Analyzed
36
This scan
Sources Checked
18
Live security feeds
Scan Duration
5.04s
Ultra-fast
Last Scan
9/5/2026
Live timestamp
Overall Risk
Low Risk