Verdict
leroymerlin.co.za appears legitimate.
Our checks found nothing pointing to fraud. Ordinary care still applies when you pay or sign in.
| What this site appears to be | Product listing and storefront page for a large home-improvement retailer with account sign-in, product SKUs, prices, availability, delivery and pickup options. Appears to be a standard e-commerce page. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | None flagged itVirusTotal | Clear |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0 reportsAbuseIPDB; shared hosting inflates this count | Noted |
| Domain age | 14 years oldRegistered history | Clear |
| Web archive | Never archivedNo public history of this site | Watch |
| Certificate | Encrypted connectionIssued by WE1 | Noted |
The page as captured
No screenshot is retained for this report.
Key findings
- Automated classification: Not Scam.
- Domain age: more than 10 years (registration continuity).
- No flags from the reputation services TrustSniffer consulted at assessment time.
- The operator behind the site could not be independently connected to a real-world brand or person.
Full analysis
Overview
This website is an online home-improvement, construction, and garden retailer presenting product listings, prices, availability, delivery options, and store collection services, with an apparent business model based on direct merchandise sales and related fulfilment services.
Scam/Impersonation Risk
No contradictions were observed. The storefront content is consistent with an established retail operation, and the reviewed page contains no phishing, brand-impersonation, malicious-content, or other fraud indicators. External reputation checks were clean, with no malicious or suspicious detections, no blacklist hit, and no reported abuse associated with the assessed hosting context. The site also has a substantial established traffic footprint, supporting the conclusion that it is apparently legitimate rather than a newly assembled impersonation site. The real-world operator identity remains independently unverified, so the evidence supports legitimacy of the website presentation without proving the legal identity of the operator.
- The homepage is identified as “Leroy Merlin | Home Improvement, Construction and Garden” and presents a conventional retail storefront with product categories, prices, stock information, delivery, and store-related functions.
- The domain was registered in 2012 and is approximately 14.43 years old; the registration record lists Nameshield as registrar and GROUPE ADEO as the organization.
- Independent reputation checks recorded 0 malicious detections, 0 suspicious detections, no Google Safe Browsing malicious result, and no external blacklist hit.
Regulatory Verification Notes
The available content supports a normal retail business model rather than a regulated financial or investment service. No licensing claim or registration number was identified in the reviewed storefront content; for this type of retail activity, that is a disclosure and applicability point requiring ordinary merchant verification rather than evidence of deception. The website’s apparent legitimacy is further supported by its mature registration history, recognized registrar, valid transport encryption, clean external reputation, and established page content, while the operator’s legal identity should remain treated as unverified rather than presumed from the brand presentation. No matching third-party broker signal was identified.
- The homepage provides retail navigation, product departments, delivery and pickup options, store-finding functionality, and customer-service navigation, with no investment, lending, or financial-return claims.
- The domain registration record lists Nameshield and GROUPE ADEO, with creation date 2012-03-12T17:23:54Z and expiration date 2027-03-12T17:23:54Z.
- The site is served through AS13335, CLOUDFLARENET - Cloudflare, Inc.; its TLS certificate is issued by WE1 at DV validation level and is valid to 2026-11-07T15:43:29+00:00.
What to Verify Next
Before credential or payment interaction, an independent check should confirm that the merchant identity, applicable regional trading entity, returns process, delivery terms, and payment-protection arrangements correspond with the retailer represented on the site. The account and checkout flow should be used only after confirming that the browser remains on the intended domain and that transaction terms are clear. Where a local registration or consumer-protection requirement applies, the relevant public registry or official merchant documentation should be checked independently.
- The account interface includes sign-in, password, address-book, saved-card, order-tracking, and checkout functions, creating a legitimate but sensitive transaction surface.
- The homepage provides “Find a Store,” “Track My Order,” and “Contact Us” functions that can be compared with independently sourced merchant information.
- The reviewed page uses two forms for login, address entry, and checkout, with no untrusted form destination detected.
Summary Verdict
The overall posture is high trust and low risk, and the available evidence is consistent with an established, apparently legitimate retail website. This conclusion reflects strong convergence across the site’s substantive storefront content, mature domain presence, clean reputation, and sound technical operation, while independent operator identity remains unverified.
Infrastructure Integrity
The website is protected by Cloudflare’s CDN and WAF, with observed delivery through Cloudflare edge infrastructure on AS13335; the origin server was not exposed in the observed resolution. This is a mitigating infrastructure control that reduces direct origin exposure, but it is not, by itself, proof of merchant legitimacy.
Closing Assessment
Normal browsing is proportionate to the assessed posture; credentials or payments should follow the ordinary independent merchant-identity, returns-policy, and payment-protection checks described above.
Written analysis generated 2026-08-13 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
No rule findings contributed to this verdict.
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of leroymerlin.co.za.
- The request stayed on leroymerlin.co.za. It was not redirected to another domain. Clear
- Registration is published under Nameshield. Clear
- DNS for this domain is served by cloudflare.com, across 2 name servers. Noted
- The registration is paid up to 2027-03-12. Noted
- It is hosted on CLOUDFLARENET, from a server in US. Noted
Domain intelligence
| Registrar | Nameshield |
|---|---|
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2a06:98c1:3122:8000:: |
| Name servers | aron.ns.cloudflare.com, terry.ns.cloudflare.com |
| SSL issuer | WE1 |
| SSL expiry | 2026-11-07 |
| Domain age | 14.43 years (continuous registration) |
| Domain expiry | 2027-03-12 |
| Archive first seen | Not available |
| Archive snapshots | 0 |
| Reputation | VirusTotal: 0 flagged | AbuseIPDB: 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about leroymerlin.co.za at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.