Getty.edu is the real deal. As the official online home of the J. Paul Getty Trust, it serves as a portal to the Getty Museum, Getty Research Institute, and conservation programs in Los Angeles. This domain has been active since 1992 — predating most commercial websites — and carries a .edu extension that only accredited institutions can obtain. Our analysis found no signs of scams or impersonation: the certificate is issued to the Getty Trust, the site has never appeared on any blacklist, and its web archive history stretches back 28 years. For a nonprofit cultural institution, that kind of longevity and transparency is exactly what you'd expect. The only minor caveats — missing DNSSEC and a partially client-rendered homepage — don't affect trustworthiness for a site that isn't handling payments or sensitive data. If you're wondering "is getty.edu a scam," the answer is a clear no. It's a trusted resource for art, research, and cultural heritage. Getty.edu reviews from users and press alike confirm its standing. Whether you're exploring Persepolis in WebGL or searching the library catalog, this site is safe to use without hesitation.
In plain English
Getty.edu is the official website of the J. Paul Getty Trust, a world-renowned museum and library. Everything about this domain confirms it's legitimate: 34 years of history, clear organizational ownership, strong security, and an impeccable reputation. You can visit with complete confidence.
Where the score comes from
Solid security setup: valid OV certificate from Internet2, enforced HTTPS with HSTS, and no blacklist or threat feed flags. The site uses a reputable CDN and modern TLS. Nothing to worry about here.
The J. Paul Getty Trust is the named registrant, verified by an OV certificate and a 34-year-old .edu domain. WHOIS contacts are real people at the Getty. This is as clear an identity as any nonprofit institution gets.
Getty.edu has been online since 1992, archived for 28 years, ranked #7255 globally, and has 47 upvoted Hacker News stories. It's a major cultural brand with a stellar long-term reputation.
The site is a single-page app, so contact info and legal pages aren't easily crawlable, but the physical address, phone numbers, and contacts are public in WHOIS and verified through the certificate. For a nonprofit, this is well above average.
Not a commercial site selling products or collecting payments, so strict GDPR compliance isn't expected. A legal page was found, and the site has structured data. No red flags for its nonprofit context.
Hosted on AWS CloudFront with email authentication and HSTS. DNSSEC is missing and only TLS 1.2 is used, but for a cultural heritage site that doesn't handle logins or payments, that's acceptable.
What we checked
Run this site? Show your score.
Add a trust badge so visitors can see your live score for themselves.
Get your badge →