Is un.org legit?
This site appears mostly safe due to its strong technical foundation and established web presence. However, the absence of crucial legal pages and easily accessible contact information raises transparency and compliance concerns that should be addressed.
Government average: 80/100 · based on 33 sites
Checked: April 21, 2026 at 10:48 PM UTC
Is un.org a scam? Here's what we found.
Security is robust with an up-to-date SSL certificate, strong HSTS and CSP headers, and clean Google Web Risk results, indicating a well-protected site.
The identity is highly credible given the domain's age of over 31 years and its prominent Tranco rank, indicating a long-standing and globally recognized presence.
With an excellent Tranco rank and a clean slate on DNS blacklists, the site maintains a strong and trustworthy reputation.
Transparency is a weak point due to the lack of clear contact information and social media links, hindering user interaction and accessibility of official channels.
Compliance is notably concerning as the site is missing fundamental legal pages like a privacy policy and terms of service, which are expected for any legitimate organization.
The infrastructure is solid, demonstrating proper DNS configuration, DMARC email authentication, and fast page load times, creating a reliable user experience.
Signals Detected
This is one of the most visited websites globally
No structured data markup found
This business has no Trustpilot presence — not unusual for smaller or newer companies
Domain created 1995-01-31T05:00:00Z (31 years, 8 months ago)
Registered through Network Solutions, LLC
Expires in 1016 days
DNSSEC status from WHOIS
Resolves to: 157.150.185.92, 157.150.185.49
Mail servers: un-org.mail.protection.outlook.com.
Domain has DMARC email authentication configured
DNS providers: ns2.un.org., ns3.un.org., ns1.un.org.
Valid certificate, expires in 137 days
Certificate issued by COMODO CA Limited
Connection uses TLS 1.2
Site enforces HTTPS via HSTS
Site has Content Security Policy configured
X-Frame-Options: SAMEORIGIN
Web server: Apache
No threats detected by Google Web Risk
robots.txt has 71 directives
Site has custom branding and social media metadata
crt.sh returned status 502
No sitemap found — common for smaller sites
Website is live and responding
No obvious contact information found on homepage
No privacy policy or terms of service found
No social media links found on homepage
Could not query Wayback Machine
Not found on any DNS blacklists
Fast page load
Embed This Badge
Stay Safe Online
Good habits to protect yourself, no matter the scan result.
Never reuse passwords across sites.
Add a second layer of security to your accounts.
Always verify unfamiliar stores before entering payment info.