Is united.com legit?
While united.com exhibits strong foundational trust signals typical of a major corporation, the persistent unreachability of the website is a significant red flag. This outage prevents users from accessing services and severely impacts immediate trust, despite other positive indicators.
Travel average: 74/100 · based on 25 sites
Checked: April 18, 2026 at 8:29 AM UTC · Refresh
Is united.com a scam? Here's what we found.
While the SSL certificate is valid and uses modern TLS 1.3, the critical issue of the site being unreachable prevents any interaction, severely undermining its practical security. However, Google Web Risk reports no known threats, which is a good sign for potential underlying security.
This domain boasts significant age and a clear professional registrar, reflecting a well-established and transparent identity. The ownership details are openly available, as expected from a major airline.
With a high Tranco rank, United.com is clearly a well-known and high-traffic website, indicating broad public recognition and an established online presence. It doesn't appear on any DNS blacklists, which is a strong positive.
The absence of a Trustpilot profile is neutral, but the lack of a favicon is a minor oversight for such a prominent brand. While no sitemap or robots.txt were found, these are less critical for a user-facing brand than for search engine indexing.
Based on the technical signals, we can infer that this is a major entity likely operating under standard compliance practices, though specific policies like privacy or terms of service aren't directly assessed by these signals.
The domain's infrastructure is robust, featuring strong email authentication (SPF, DMARC), multiple name servers from a major provider, and clear DNS resolution, all indicative of a professionally managed online presence.
Signals Detected
Could not load website: Get "https://www.united.com/": stream error: stream ID 3; INTERNAL_ERROR; received from peer
This is a well-known, high-traffic website
This business has no Trustpilot presence — not unusual for smaller or newer companies
Valid certificate, expires in 234 days
Certificate issued by DigiCert Inc
Connection uses TLS 1.3
Domain created 1998-12-17T05:00:00Z (27 years, 8 months ago)
Registered through CSC Corporate Domains, Inc.
Expires in 241 days
DNSSEC status from WHOIS
crt.sh returned status 429
No favicon found — unusual for an established business
Could not reach site: Head "https://www.united.com/": stream error: stream ID 5; INTERNAL_ERROR; received from peer
No threats detected by Google Web Risk
Resolves to: 23.209.208.130
Mail servers: mxa-00212602.gslb.pphosted.com., mxb-00212602.gslb.pphosted.com.
Domain has SPF email authentication configured
Domain has DMARC email authentication configured
DNS providers: a1-66.akam.net., a11-66.akam.net., a5-65.akam.net., a10-65.akam.net., a26-64.akam.net., a18-67.akam.net.
No robots.txt file — common for small sites
No sitemap found — common for smaller sites
Not found on any DNS blacklists
Could not query Wayback Machine
Stay Safe Online
Good habits to protect yourself, no matter the scan result.
Never reuse passwords across sites.
Add a second layer of security to your accounts.
Always verify unfamiliar stores before entering payment info.