CanITrustThis

Website trust report

Is hm.com legit?

50/ 100

Proceed with cautionLast checked 15 Sept 2026, 16:47
View this check as a shareable, dated report

Overview

The website hm.com has a valid, organization-validated HTTPS certificate and email anti-spoofing configured. However, independent feedback includes some negative experiences, and automated checks of the site content were blocked. The domain's age could not be determined.

What should I do?

Given the mixed independent feedback, it is advisable to review individual complaints before making significant purchases. The presence of an organization-validated certificate and email anti-spoofing are positive indicators for security.

Scan completed with limited data4
  • Fetching the website: The site could not be fetched (The operation was aborted due to timeout)
  • Inspecting pages & policies: No page content available to inspect
  • Looking for company information: Company information could not be extracted
  • Analysing inconsistencies: No page content available — the site could not be fetched

Why this score

  • Domain history

    Not scored

  • Company identity

    Not scored

  • Reputation

    9/20

  • Website consistency

    Not scored

  • Offer plausibility

    Not scored

  • Technical & security

    13/15

Categories marked not scored never count against a site.

scoring algorithm trust-score-v1.3

Findings

Most serious first. Open a finding for the detail and its source.

  • Mixed independent feedbackReputation · low confidence

    Independent mentions include some negative experiences (6 of 6 classified mentions). Individual complaints are normal; review them before larger purchases.

    Source: Web search

  • Valid HTTPS certificateTechnical & security · high confidence

    The site's connection is encrypted with a valid certificate issued by DigiCert Inc.

  • Organization-validated certificateTechnical & security · high confidence

    The TLS certificate includes a validated organization name (H & M Hennes & Mauritz AB), which requires identity checks by the certificate authority.

  • Email anti-spoofing configuredTechnical & security · medium confidence

    The domain publishes SPF/DMARC records, which help prevent email spoofing.

  • Domain age could not be determinedDomain history · high confidence

    Registration data for this domain was not available from the RDAP lookup, so domain age could not be assessed. This is not counted against the site.

    Source: RDAP

  • Site blocks automated checksTechnical & security · high confidence

    The site did not respond in time, so we could not read its pages, company details or policies. Many large retailers block automated traffic, and this counts neither for nor against the site — but it means this report rests only on domain, certificate and threat-list checks.

Take a closer look before buying

The buyer report explains the findings, highlights unanswered questions and gives you a before-payment checklist.

  • Findings with their source links, and what each one means
  • Every question that remains open, and how to close it yourself
  • A before-payment checklist tailored to how you would pay
  • A saved copy of this report and a PDF

0 of 4 check areas could be evaluated from what this site exposed. The report documents every open question and the steps to close them yourself before paying.

This tailors your checklist. Payment for this report is separate.

One payment for this report. No subscription. No account needed.

Decision support, not a guarantee of legitimacy or delivery. Important warnings are free.