No threats detected
All checks passed. This site appears legitimate — but always stay alert for phishing even on trusted domains.
Is todoist.com legit or a scam?
Official Todoist productivity app site with 19.5-year-old domain, clean security scans, and established company registration.
Analysis Summary
Website Preview
Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site. See full visual analysis →
Visual analysis
We capture a fresh screenshot of the live page and ask a vision model to look for scam visual patterns — fake trust badges, countdown timers, overlay pop-ups, and visual clones of legitimate brands.
No scam visual patterns detected
The screenshot shows a fully-rendered, professional landing page for Todoist with no visual indicators of a scam or malicious intent.
What our vision model saw
6 signalsProfessional layout consistent with legitimate Todoist branding
High-quality graphics and interface mockups
Standard cookie consent modal present
Functional navigation menu with pricing and login links
App store rating indicators and official logos present
No urgency tactics or fake trust badges detected
Intelligence
The domain todoist.com was registered in January 2007 and belongs to Doist Inc., a Delaware-registered company with an active business filing. Our antivirus network returned zero detections across 92 engines and the hosting IP shows no abuse history. The page displays standard professional branding, legitimate navigation, and real user testimonials without urgency tactics or fake trust signals. Multiple independent sources confirm the company has operated since 2007 and received positive coverage from major review outlets. Reports of phishing replicas exist, but they target users through fake ads and do not involve the official domain itself.
Web Research Findings
Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for todoist.com, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.
- Domain registered January 5, 2007 (19.5 years old).
- Operated by Doist Inc., a Delaware-registered company (active since at least 2019 incorporation filing referenced; company #5800775).
- Official site claims 30+ million users; positive professional reviews from PCMag (Editors' Choice, 5/5), Product Hunt, Forbes Advisor.
- Trustpilot page exists with mixed user comments but no aggregate scam flags found in searches.
- Multiple reports of phishing replicas and malicious Google ads impersonating Todoist (e.g., Reddit post, TechLockdown article from Apr 2026).
- No direct scam, fraud, or widespread complaint reports against the official todoist.com domain found.
- Company is bootstrapped, profitable, remote-first with ~100 employees across 35+ countries; no VC funding.
- Redditopen
"Beware of this malicious Todoist replica website that is top 1 on Google. None of the links on the fake page work properly except for a fake login page and a download page."
- TechLockdownopen
"Scammers Target Users of Popular Todo App on Google. I recently came across a developer on X (twitter) who stumbled onto a phishing website that looked exactly like a popular todolist app."
- PCMagopen
"Todoist is an exceptional personal to-do list app with an inviting and functional user experience that extends across every major platform. ... earns our Editors' Choice award ... exemplary five-star rating."
- Product Huntopen
"Reviewers see Todoist as a dependable, lightweight task manager that does the basics unusually well: quick capture, natural-language dates, recurring tasks, clean organization, strong sync across devices, and useful integrations."
- Forbes Advisoropen
"Users across the sites praise Todoist for its ease of use, task management tools and simplistic user interface."
Doist Inc. registered in Delaware (company number 5800775); registered address examples include 251 Little Falls Drive, Wilmington, DE 19808 and 2100 Geng Road, Suite 210, Palo Alto, CA 94303. Founded 2007, bootstrapped, remote-first company behind Todoist.
Our research found two reports of phishing replicas impersonating Todoist through Google ads, referenced on Reddit and TechLockdown. Three professional reviews from PCMag, Product Hunt, and Forbes Advisor praise the application's design and functionality. Business registration records confirm Doist Inc. as an active Delaware company operating since 2007 with no complaints or scam reports against the official todoist.com domain.
Domain Timeline
- Jan 5, 2007Domain registered
First appeared in WHOIS records — 20 years old today.
- Jul 8, 2026Latest security review — Reviewed as safe
This scan re-ran every check and found no active threat signals.
todoist.com has operated for years with no threat signals in this review — a long, stable track record, though it is never a guarantee on its own.
Threat Detection
Antivirus Engines
Security Scans
Checked against the major public blocklists used by browsers and security tools — no hits.
Reputation Sources
How this domain rates across independent threat-intelligence and blocklist providers.
Technical Details
domain · encryption · redirects · server reputation · referencedContact Verification
We fetched the page and looked for real-world contact details. Legitimate businesses almost always publish an email on their own domain, a phone number, and a postal address. Scam shops usually don't.
- No contact email found anywhere on the page.
- No phone number listed on the page.
- No postal address visible on the page.
- Links to 4 social profiles.
Domain & Encryption
Redirect Chain
- 1301http://todoist.com/
- 2301https://todoist.com/
- 3200https://www.todoist.com/
Server Reputation
Referenced Domains
Outbound domains this page links to or loads resources from. Each links to its own security scan.
What to do
Still, stay alert
No major threat indicators — but a clean scan does not guarantee every page is safe, and phishing emails routinely spoof real domains.
- Double-check the exact URL in your address bar
Confirm you are actually on todoist.com and not a lookalike like t-odoist.com.com or an IDN homoglyph.
- Use a password manager
Password managers only auto-fill on the exact domain they were saved for — they refuse to fill lookalike domains, which is the single best phishing defence.
- OpenDiscuss this site on the forum
If you have first-hand experience with this site — good or bad — share it with the MalwareTips community.
Final Verdict
Todoist.com is the official website for a well-known task management application. The domain is 19.5 years old, operated by a registered US company, and carries no malware detections or scam reports against the real site.
Safety FAQ
Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.
- Our automated security review found no threat indicators on todoist.com. The site appears legitimate based on the signals we checked, but always stay alert for phishing emails that spoof real domains.
- todoist.com passed our automated security checks with a trust score of 95/100. No antivirus engines or major blacklists flagged the site at the time of the last scan.
- Yes. todoist.com presents a valid TLSv1.3 certificate issued by Amazon · Amazon RSA 2048 M01, expiring in 243 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
- todoist.com is 19.5 years old, registered on 1/5/2007 through Amazon Registrar, Inc.. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.
- No. All 92 antivirus engines in our malware network report todoist.com as clean.
- No. todoist.com is not currently listed on the major browser blocklist feeds that modern browsers use.
- todoist.com resolves to an IP operated by Amazon.com, Inc. in CA (usage type: Content Delivery Network). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
- Yes. todoist.com sits in the global top-100k on Cloudflare Radar, which means it has substantial real-world traffic. That does not automatically make it safe, but established brands almost always rank here and throwaway scam domains almost never do.
User reviews & comments(0)
Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.