Is alibaba.com legit?
Alibaba.com is a trusted platform with a strong technical foundation and an excellent reputation. While it could improve its transparency by making contact information and social media links more prominent, these are minor issues for such a well-established and highly-trafficked site.
Marketplace average: 74/100 · based on 15 sites
Checked: April 21, 2026 at 10:18 AM UTC
Is alibaba.com a scam? Here's what we found.
Security is robust with up-to-date TLS 1.3, valid certificates, and no threats detected by Google Web Risk, indicating a well-protected environment.
With a domain age of over 27 years and public WHOIS information, Alibaba's identity is clearly established and highly reputable, demonstrating significant longevity.
Its extremely high Tranco Rank and clean DNS blacklist status affirm its strong reputation as a globally recognized and trusted online entity.
Transparency could be improved by providing more visible contact information and social media links on the homepage to enhance user access and engagement.
The presence of both Privacy & Terms pages demonstrates a commitment to user privacy and legal compliance, which is essential for a major e-commerce platform.
Technical infrastructure is solid, featuring reliable DNS resolution, robust email authentication with SPF and DMARC, and fast page load times, though the sitemap misconfiguration is a minor technical oversight.
Signals Detected
This is one of the most visited websites globally
Site has structured data markup
This business has no Trustpilot presence — not unusual for smaller or newer companies
Domain created 1999-04-15T04:00:00Z (27 years, 4 months ago)
Registered through Alibaba Cloud Computing (Beijing) Co., Ltd.
Expires in 1493 days
DNSSEC status from WHOIS
Resolves to: 47.246.137.105, 47.246.131.198, 47.246.136.156, 47.246.136.52
Mail servers: mx01.mail.alibaba.com., mx02.mail.alibaba.com.
Domain has SPF email authentication configured
Domain has DMARC email authentication configured
DNS providers: ns2.alibabadns.com., ns1.alibabadns.com.
Valid certificate, expires in 163 days
Certificate issued by GlobalSign nv-sa
Connection uses TLS 1.3
Site has custom branding and social media metadata
Site enforces HTTPS via HSTS
Web server: Tengine
No threats detected by Google Web Risk
robots.txt has 203 directives
Sitemap URL returns non-XML content
Website is live and responding
No obvious contact information found on homepage
Website has both privacy policy and terms of service pages
No social media links found on homepage
Not found on any DNS blacklists
Could not query Wayback Machine
Could not query certificate transparency logs
Fast page load
Stay Safe Online
Good habits to protect yourself, no matter the scan result.
Never reuse passwords across sites.
Add a second layer of security to your accounts.
Always verify unfamiliar stores before entering payment info.