SAFE

No threats detected

All checks passed. This site appears legitimate — but always stay alert for phishing even on trusted domains.

Security Review

Is chewy.com legit or a scam?

Our verdict:Safe· 90/100

Official Chewy.com pet store with 22-year-old domain, public company status, and scam reports only about impersonators.

chewy.comScanned 1h ago
0
Trust score
SAFE
Score breakdown
Heuristics 100·MT 85
Screenshot of chewy.comSee the live page ↓
Positive signals (5)
Antivirus clearNot on major blacklistsDomain is 22 years oldEncrypted connectionClean server reputation
View density

Analysis Summary

Threat Intelligence
0/92
All engines report clean
Domain Age
22 years old
Registered Apr 18, 2004
Intelligence
Safe
Low likelihood · 90% confidence

Website Preview

Screenshot of chewy.com
LIVE RENDER
chewy.com

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site. See full visual analysis →

Visual analysis

We capture a fresh screenshot of the live page and ask a vision model to look for scam visual patterns — fake trust badges, countdown timers, overlay pop-ups, and visual clones of legitimate brands.

50
/ 100
Visual inspection

Visual similarities noted — cleared by the overall checks

Our vision model noted some visual similarity to a known brand, but the domain, security records, and reputation checks confirm this is the legitimate site — so this is shown for transparency, not as a red flag.

Visual similarity50/100

What our vision model saw

1 signal

Page renders a 403 Forbidden error

Intelligence

Advanced threat intelligence
Analysis
Low scam likelihoodengineMT · Guardiantrust85/100
MT AgentLive web researchVisual inspection
0%
Confidence
The domain registered in April 2004 and belongs to Chewy, Inc., a NYSE-listed company with headquarters in Florida. Our antivirus network returned zero detections and the hosting IP shows no abuse history. The page itself returned a 403 error, which is a normal access restriction rather than a broken or malicious site. Scam reports in the evidence package describe fake invoices and phishing texts that impersonate Chewy, not activity on the real domain. Independent review aggregators show thousands of customer ratings with generally positive scores for service and refunds. The combination of long domain history, verified business registration, and clean technical signals outweighs the presence of impersonation complaints.
Full dossier
Analysis complete

Page Content

The screenshot shows a standard 403 Forbidden error page from Chewy.com. This indicates the crawler was blocked by normal access controls rather than any malicious content or broken storefront. No login forms, payment fields, or suspicious scripts were visible.

Infrastructure

The site uses a valid DigiCert SSL certificate with 106 days remaining. The hosting IP 23.197.44.87 carries a zero abuse score and zero prior reports. Our antivirus network cleared the domain across all 92 engines with no malicious or suspicious flags.

Domain History

WHOIS records show the domain was registered on 2004-04-18 through Nom-iq Ltd. dba COM LAUDE, giving it an age of 22.2 years. The company behind it, Chewy, Inc., is a Delaware corporation headquartered in Florida, publicly traded on the NYSE since 2019, and BBB-accredited with an A+ rating since 2016.

Web Reputation

Our research found three scam mentions, all describing fake invoices or phishing texts that impersonate Chewy rather than originating from the real site. Positive mentions include 13,141 an independent review aggregator reviews averaging 3.3/5 and 15,233 Google ratings averaging 4.7/5, with frequent praise for customer service and easy refunds. The evidence package also notes roughly 520 BBB complaints over three years, mostly related to shipping and billing issues typical for a large retailer.

What this means for you

Chewy.com is the legitimate, long-established online pet retailer. Users should still watch for fake emails or texts claiming to be from Chewy and avoid clicking links in unsolicited messages.

Risk Factors
2
  • Page returned a 403 Forbidden error, limiting direct content inspection.
  • Approximately 520 BBB complaints filed in the last three years, mostly shipping and billing disputes.
Positive Signals
4
  • Domain registered 22.2 years ago in April 2004.
  • Company is publicly traded on NYSE as CHWY with verified Delaware incorporation.
  • Zero detections across our antivirus network and clean IP reputation.
  • Thousands of customer reviews on independent sites with generally positive service feedback.
AI Recommendation
Shop directly at chewy.com or through verified app stores. Ignore unsolicited emails or texts claiming to be from Chewy and never click links in those messages.
Next-gen fraud intelligence
Evidence-backedCross-checked

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for chewy.com, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Business registration
Active · United States (Delaware corporation, HQ Florida)
Site traces back to an actively registered business.
Clone check
Not a clone
No well-known site's layout or branding detected here.
Typosquat check
No look-alike match
The domain doesn't resemble any well-known brand's spelling.
Web mentions
3 scam reports · 520 complaints · 3 positive
Key findings
7 headline facts from open-web research
  • Domain registered April 2004, age 22+ years; company founded 2011, public since 2019 (NYSE:CHWY)
  • BBB accredited A+ since 2016 with ~520 complaints filed in last 3 years (mostly shipping/charges)
  • Trustpilot: 13,141 reviews, average score 3.3/5
  • Google reviews: 4.7/5 from 15,233 ratings praising customer service and refunds
  • Scam reports center on account hacks (weak passwords), fake invoices/texts impersonating Chewy, not the site itself
  • Wikipedia/SEC filings confirm Delaware incorporation, Plantation FL HQ, ~18,000 employees, $11B+ annual revenue
  • ScamAdviser snippet states 'chewy.com is legit and safe for consumers'
Scam reports (3)
Direct quotes from public scam databases, forums, and news.
  • Reddit r/Scamsopen

    "Someone's real Chewy account with a weak password becomes compromised by hacker. Call Chewy to report the fraud."

  • Facebook group postopen

    "Warning if you buy from Chewy. There is a scam going on. I got an invoice in an email for dog food I never ordered! They are just trying to get personal information from you."

  • Instagram postopen

    "Scam texts about "Chewy" charges? IT'S A TRAP! Getting a text saying you were charged by Chewy and to "click here"? Don't take the bait! These messages are NOT FROM US!"

Positive reviews (3)
Quotes indicating the site is legitimate.
  • Google store reviewsopen

    "Chewy is the best online pet store , hands down. they refunded me my money for a bottle of meds."

  • ConsumerAffairsopen

    "I love Chewy.com so much. ... Their customer service has always been unmatched. ... they also sent my 2 surviving girls a whole care package"

  • Trustpilotopen

    "13141 people have already reviewed Chewy.com"

Business registration
Status: active · United States (Delaware corporation, HQ Florida)

Public company (NYSE: CHWY) since 2019; founded 2011 as Chewy.com, LLC converted to Chewy, Inc. in 2016; BBB accredited since 2016, A+ rating, ~520 complaints in last 3 years

Research summary
Narrative write-up from our AI analyst, grounded on the facts above

Our research found three scam mentions on Reddit, Facebook, and Instagram. These reports describe account compromises from weak passwords and fake invoices or texts that impersonate Chewy, not activity on the real site. Positive mentions include 13,141 an independent review aggregator reviews and 15,233 Google ratings praising refunds and service. The company is confirmed as a public Delaware corporation with Florida headquarters and roughly 18,000 employees.

Domain Timeline

  1. Apr 18, 2004
    Domain registered

    First appeared in WHOIS records — 22 years old today.

  2. Jul 9, 2026
    Latest security review — Reviewed as safe

    This scan re-ran every check and found no active threat signals.

chewy.com has operated for years with no threat signals in this review — a long, stable track record, though it is never a guarantee on its own.

Threat Detection

Antivirus Engines

Clean pass · verified
Clean across 92 engines

We cross-check every URL against our antivirus network of 92 malware and blacklist engines. None of them flagged this URL in the last scan.

0Malicious0Suspicious62Harmless92Engines
Clean
Kaspersky
Clean
Bitdefender
Clean
Microsoft
Not in pass
ESET-NOD32
Not in pass
Avira
Not in pass
Sophos
Clean
Fortinet
Clean
Google Safebrowsing
Clean
Emsisoft
Clean

No engine detections. The URL passed every antivirus and blacklist engine we queried in this scan. Stay vigilant — AV coverage is only one signal among many.

Security Scans

Blacklist Check
Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing
Not listedCheck ↗
VirusTotal
Not listedCheck ↗
AbuseIPDB
Not listedCheck ↗

Technical Details

Domain & Encryption

Domain History
Age22 years old
RegistrarNom-iq Ltd. dba COM LAUDE
RegisteredApr 18, 2004
ExpiresApr 18, 2027
Owner privacyVisible
Encryption Certificate
StatusValid
ProtocolTLSv1.3
IssuerDigiCert Inc · DigiCert Global G3 TLS ECC SHA384 2020 CA1
ExpiresOct 23, 2026 (106d)
Self-signedNo
Hosting & Technology
HostingAkamai Technologies, Inc.
Server locationUS
PopularityTop 100k worldwide

Redirect Chain

Hops
2
Cross-domain
No
Lookalike
No
Punycode
No
  • 1301http://chewy.com/
  • 2301https://chewy.com/
  • 3404https://www.chewy.com/

Server Reputation

Abuse Intelligence
Confidence score0%
Reports on file0
ISPAkamai Technologies, Inc.
Usage typeData Center/Web Hosting/Transit

What to do

Still, stay alert

No major threat indicators — but a clean scan does not guarantee every page is safe, and phishing emails routinely spoof real domains.

  • Double-check the exact URL in your address bar

    Confirm you are actually on chewy.com and not a lookalike like c-hewy.com.com or an IDN homoglyph.

  • Use a password manager

    Password managers only auto-fill on the exact domain they were saved for — they refuse to fill lookalike domains, which is the single best phishing defence.

  • Discuss this site on the forum

    If you have first-hand experience with this site — good or bad — share it with the MalwareTips community.

    Open

Final Verdict

0
Trust / 100
Final Verdict·chewy.com
SAFE

Chewy.com is the official website of a major US pet retailer. The domain is 22 years old, the company is publicly traded, and scam reports target fake invoices or account hacks rather than the site itself.

Shop directly at chewy.com or through verified app stores. Ignore unsolicited emails or texts claiming to be from Chewy and never click links in those messages.

AV engines
92
Domain age
22 yrs
Flagged
0
Scan another URL
Security review completemalwaretips.com/url-scan

Safety FAQ

Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.

  • Our automated security review found no threat indicators on chewy.com. The site appears legitimate based on the signals we checked, but always stay alert for phishing emails that spoof real domains.
  • chewy.com passed our automated security checks with a trust score of 90/100. No antivirus engines or major blacklists flagged the site at the time of the last scan.
  • Yes. chewy.com presents a valid TLSv1.3 certificate issued by DigiCert Inc · DigiCert Global G3 TLS ECC SHA384 2020 CA1, expiring in 106 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
  • chewy.com is 22.2 years old, registered on 4/18/2004 through Nom-iq Ltd. dba COM LAUDE. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.
  • No. All 92 antivirus engines in our malware network report chewy.com as clean.
  • No. chewy.com is not currently listed on the major browser blocklist feeds that modern browsers use.
  • chewy.com resolves to an IP operated by Akamai Technologies, Inc. in US (usage type: Data Center/Web Hosting/Transit). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
  • Yes. chewy.com sits in the global top-100k on Cloudflare Radar, which means it has substantial real-world traffic. That does not automatically make it safe, but established brands almost always rank here and throwaway scam domains almost never do.
Recently scanned

Other Safe reports

Browse all reports
Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…
Loading comments…
This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.