Is craigslist.org legit?
Craigslist remains a highly established and generally trustworthy platform despite some technical hiccups and traditional transparency issues. Its long history and high traffic volume speak to its legitimacy, though users should be mindful of the peer-to-peer nature of transactions.
Marketplace average: 74/100 · based on 15 sites
Checked: April 18, 2026 at 8:01 AM UTC · Refresh
Is craigslist.org a scam? Here's what we found.
The site employs solid security foundations with a valid SSL certificate from a reputable issuer and a modern TLS version. Google Web Risk also finds the site clean, indicating good protection against common online threats.
With a domain age of 28 years and registration through a known corporate registrar like MarkMonitor, Craigslist demonstrates a strong and established online identity. The protected WHOIS information is standard for large, high-profile domains, not a red flag here.
Craigslist’s immense Tranco rank and clean DNS blacklist status affirm its widespread reputation and long-standing presence. There’s no indication of any reputational damage from blacklisting or negative signals.
Transparency is functional with legal pages present, but the site lacks readily accessible direct contact information and social media links on its homepage. While typical for Craigslist's minimalist approach, it's a minor inconvenience for users seeking direct support.
The presence of both a privacy policy and terms of service indicates a commitment to legal and user responsibility. These are essential for a platform facilitating peer-to-peer interactions.
While core DNS and email authentication are well-configured, a slow page load time and an 'unreachable' status during testing indicate potential server or hosting performance issues. A misconfigured sitemap is a minor technical oversight.
Signals Detected
This is a well-known, high-traffic website
Site uses structured data identifying itself as: WebSite
This business has no Trustpilot presence — not unusual for smaller or newer companies
Domain created 1997-09-11T04:00:00Z (28 years, 0 months ago)
Registered through MarkMonitor Inc.
Expires in 144 days
DNSSEC status from WHOIS
Not found on any DNS blacklists
Valid certificate, expires in 288 days
Certificate issued by DigiCert Inc
Connection uses TLS 1.2
Site has custom branding and social media metadata
robots.txt has 8 directives
Resolves to: 208.82.237.129
Mail servers: mxicorpa.craigslist.org.
Domain has SPF email authentication configured
Domain has DMARC email authentication configured
DNS providers: ns2a.craigslist.org., ns9a.craigslist.org., ns2f.craigslist.org., ns1f.craigslist.org., ns1a.craigslist.org., ns9f.craigslist.org.
Sitemap URL returns non-XML content
Could not reach site: Head "https://nuremberg.craigslist.org/": net/http: HTTP/1.x transport connection broken: malformed HTTP status code "html>"
No threats detected by Google Web Risk
Website is live and responding
No obvious contact information found on homepage
Website has both privacy policy and terms of service pages
No social media links found on homepage
Could not query Wayback Machine
Could not query certificate transparency logs
Slow page load — may indicate cheap hosting
Stay Safe Online
Good habits to protect yourself, no matter the scan result.
Never reuse passwords across sites.
Add a second layer of security to your accounts.
Always verify unfamiliar stores before entering payment info.