Is upwork.com legit?
You should use caution when considering upwork.com. While it's a globally recognized brand with a long history, significant issues were found with site accessibility and the complete absence of crucial legal and contact information.
Job Boards average: 68/100 · based on 10 sites
Checked: April 18, 2026 at 8:30 AM UTC · Refresh
Is upwork.com a scam? Here's what we found.
The site uses a modern TLS version and has strong security headers, but the extremely short expiry of the SSL certificate (18 days) is a glaring and immediate concern, impacting perceived trustworthiness.
With a 24-year-old domain registered through a major corporate registrar, the identity of this site is well-established and highly credible.
As one of the most visited websites globally and with a clean record on Google Web Risk and DNS blacklists, its overall reputation is robust despite some technical presentation issues.
The inability to access the website due to a 403 error, coupled with a complete lack of visible contact information and social media links, severely undermines its transparency and users' ability to engage or get support.
The absolute absence of privacy policy and terms of service pages is a critical red flag for compliance, especially for a platform potentially handling sensitive user data and transactions.
The underlying technical infrastructure is strong, utilizing Cloudflare, robust email authentication, and present DNS security features, providing a solid foundation for network reliability and email integrity.
Signals Detected
This is one of the most visited websites globally
No structured data markup found
This business has no Trustpilot presence — not unusual for smaller or newer companies
Site has a favicon but no social sharing metadata
Valid certificate, expires in 18 days
Certificate issued by DigiCert Inc
Connection uses TLS 1.3
Domain created 2002-01-30T13:10:35Z (24 years, 6 months ago)
Registered through MarkMonitor Inc.
Expires in 652 days
DNSSEC status from WHOIS
Site enforces HTTPS via HSTS
X-Frame-Options: SAMEORIGIN
Web server: cloudflare
No threats detected by Google Web Risk
No sitemap found — common for smaller sites
Resolves to: 104.18.90.237, 104.18.89.237
Mail servers: aspmx.l.google.com., alt1.aspmx.l.google.com., alt2.aspmx.l.google.com., aspmx3.googlemail.com.
Domain has SPF email authentication configured
Domain has DMARC email authentication configured
DNS providers: jim.ns.cloudflare.com., fay.ns.cloudflare.com.
Website returned status 403
No obvious contact information found on homepage
No privacy policy or terms of service found
No social media links found on homepage
Not found on any DNS blacklists
No robots.txt file — common for small sites
Could not query Wayback Machine
Could not query certificate transparency logs
Fast page load
Embed This Badge
Stay Safe Online
Good habits to protect yourself, no matter the scan result.
Never reuse passwords across sites.
Add a second layer of security to your accounts.
Always verify unfamiliar stores before entering payment info.