api.uhaul.net is a subdomain owned by U-Haul, a major moving and truck rental company. That alone gives it a baseline of legitimacy — the domain is not a random impersonator. However, the specific address you're looking at currently returns a 404 error, meaning it's either an API endpoint that expects a specific path or a resource that no longer exists. For anyone wondering 'is api.uhaul.net safe', the technical signals are reassuring: a valid SSL certificate from DigiCert, no malware flags, and clean DNS records. The lack of a contact page or privacy policy on this subdomain is normal for a backend service, since those belong on the main uhaul.com site. If you were expecting a functioning website here, you won't find one. But there's no reason to suspect a scam. The bigger question is whether you need to interact with this API at all — if you're a developer working with U-Haul's systems, you'll likely need proper credentials and documentation. For a casual visitor, there's nothing to see or do. In short, api.uhaul.net is not a fake site, but it's also not a place you'd browse or buy from.
In plain English
This is a subdomain of the legitimate U-Haul company, but it's not a working website — it returns a 404 error. The security setup is solid, and there's no evidence of scams or malware. If you're trying to access an API endpoint, it may require specific paths or authentication, but the site itself doesn't pose a risk.
Where the score comes from
Solid encryption with a valid certificate from a trusted issuer, no malware flags, and modern TLS. The lack of browser security headers is minor for a backend API endpoint.
This is a subdomain of uhaul.net, a well-known company, so ownership is clear even though WHOIS doesn't cover subdomains. No about page, but that's normal for an API.
No blacklist hits, good standing. The lack of web archive history and Tranco rank is expected for a subdomain that isn't a public website.
No contact info, about page, or social media links on this subdomain. That's typical for an API endpoint, but it means a visitor hitting the 404 page gets no explanation.
No privacy policy or terms on this subdomain, which is standard for a backend API. The main uhaul.net site would handle those disclosures.
Hosted on Microsoft Azure, reliable DNS resolution, no email handling. The missing DNSSEC and robots.txt are not concerning for a subdomain like this.
What we checked
Run this site? Show your score.
Add a trust badge so visitors can see your live score for themselves.
Get your badge →