Is kayak.com legit?
Kayak.com is a well-established and trusted travel website. While they could improve transparency by adding contact and social media links, their long history, robust technical foundation, and clean security checks indicate a reliable platform for travel planning.
Travel average: 74/100 · based on 25 sites
Checked: April 16, 2026 at 4:42 PM UTC · Refresh
Is kayak.com a scam? Here's what we found.
The site boasts a strong security setup, utilizing the latest TLS version and maintaining a valid SSL certificate. Importantly, there are no red flags from Google Web Risk, indicating a safe browsing environment and protection against common online threats.
With a domain age of over 31 years, Kayak.com has a deeply established online identity. This longevity is a strong indicator of legitimacy and stability in the highly competitive travel industry.
Kayak.com enjoys a very high traffic rank, signifying its widespread recognition and usage. Its clean record on DNS blacklists further underscores its reputable standing, despite the absence of a Trustpilot profile.
While the site has clear legal pages, the absence of readily visible contact information and social media links on the homepage is a minor drawback. For a major travel aggregator, more direct avenues for customer interaction would enhance trust.
The presence of both privacy policy and terms of service pages demonstrates a commitment to legal and user responsibility. This is crucial for any platform handling personal data and financial transactions.
Kayak.com's infrastructure is robust, with multiple IP addresses ensuring reliability and efficient DNS resolution. Strong email authentication (SPF and DMARC) helps protect against phishing attempts, which is paramount for a brand of this scale.
Signals Detected
This is a well-known, high-traffic website
No structured data markup found
Domain created 1995-04-13T04:00:00Z (31 years, 5 months ago)
Registered through 101domain GRS Limited
Expires in 380 days
DNSSEC status from WHOIS
Site has a favicon but no social sharing metadata
Valid certificate, expires in 45 days
Certificate issued by Let's Encrypt
Connection uses TLS 1.3
This business has no Trustpilot presence — not unusual for smaller or newer companies
Resolves to: 2a04:4e42:400::285, 2a04:4e42:200::285, 2a04:4e42:600::285, 2a04:4e42::285, 151.101.65.29, 151.101.193.29, 151.101.1.29, 151.101.129.29
Mail servers: mxb-009e5101.gslb.pphosted.com., mxa-009e5101.gslb.pphosted.com.
Domain has SPF email authentication configured
Domain has DMARC email authentication configured
DNS providers: blue.foundationdns.com., blue.foundationdns.net., blue.foundationdns.org.
Site maintains a proper sitemap with 115 indexed pages
robots.txt has 1163 directives and references a sitemap
Not found on any DNS blacklists
crt.sh returned status 502
Site has Content Security Policy configured
Web server: KAYAK/1.0
No threats detected by Google Web Risk
Website is live and responding
No obvious contact information found on homepage
Website has both privacy policy and terms of service pages
No social media links found on homepage
Could not query Wayback Machine
Fast page load
Embed This Badge
Stay Safe Online
Good habits to protect yourself, no matter the scan result.
Never reuse passwords across sites.
Add a second layer of security to your accounts.
Always verify unfamiliar stores before entering payment info.