Is pki.goog legit?
This site appears to be trustworthy, demonstrating a robust technical foundation and adherence to compliance standards. While some transparency elements like WHOIS info and social media presence are limited, the overall security and infrastructure are strong.
Software & Downloads average: 78/100 · based on 75 sites
Checked: April 21, 2026 at 2:53 AM UTC
Is pki.goog a scam? Here's what we found.
The site exhibits excellent security, utilizing modern TLS 1.3 encryption and having a valid certificate. It also passes Google Web Risk checks with no threats detected, indicating a secure browsing environment.
Identity visibility is moderately good, but the inability to perform a WHOIS check on the '.goog' TLD means the direct ownership details are not publicly accessible through standard means.
The site has a very strong reputation, being highly ranked globally by Tranco and completely clean on all DNS blacklists. The inability to check archives is a minor hiccup but doesn't detract from its current standing.
Transparency is fair, with contact and legal pages present. However, the lack of social media presence and more detailed branding information slightly reduces its score in this area.
The site demonstrates good compliance by providing both a privacy policy and terms of service. This indicates a commitment to informing users about their data and usage terms.
The infrastructure is robust and well-configured, featuring active and healthy DNS records, comprehensive email authentication (SPF, DMARC), and a good robots.txt and sitemap setup. The fast page load time confirms an optimized technical foundation.
Signals Detected
No structured data markup found
This is one of the most visited websites globally
This business has no Trustpilot presence — not unusual for smaller or newer companies
Valid certificate, expires in 62 days
Certificate issued by Google Trust Services
Connection uses TLS 1.3
Resolves to: 2001:4860:4802:32::1d, 216.239.32.29
Mail servers: smtp.google.com.
Domain has SPF email authentication configured
Domain has DMARC email authentication configured
DNS providers: ns1.zdns.google., ns2.zdns.google., ns3.zdns.google., ns4.zdns.google.
crt.sh returned status 429
Site has a favicon but no social sharing metadata
Web server: sffe
No threats detected by Google Web Risk
Site maintains a proper sitemap with 7 indexed pages
robots.txt has 3 directives and references a sitemap
no WHOIS server found for TLD "goog"
Website is live and responding
Website appears to have contact information
Website has both privacy policy and terms of service pages
No social media links found on homepage
Not found on any DNS blacklists
Could not query Wayback Machine
Fast page load
Stay Safe Online
Good habits to protect yourself, no matter the scan result.
Never reuse passwords across sites.
Add a second layer of security to your accounts.
Always verify unfamiliar stores before entering payment info.