Is userapi.com legit?
This site appears mostly safe due to strong security foundations and clear identity, but use caution due to the high number of external scripts. The redirect to VK.com suggests it's primarily an API backend for the social network.
Software & Downloads average: 80/100 · based on 75 sites
Checked: April 25, 2026 at 10:19 PM UTC
Is userapi.com a scam? Here's what we found.
The site has solid foundational security with a valid SSL certificate from a known issuer and modern TLS v1.3. However, the high number of external scripts is a notable concern for potential vulnerabilities.
With a domain age of nearly 18 years and a clear registrar, the site has a well-established digital identity. The high Tranco rank indicates a significant global presence.
The site benefits from a very high Tranco rank and a clean DNS blacklist status, suggesting a good general reputation. The absence of a Trustpilot profile and inability to check the Wayback Machine are minor points.
While contact information and legal pages are present, the absence of social media links and lack of social sharing metadata suggest a basic or less transparent branding approach. The redirect away from the primary domain also impacts transparency.
The presence of both a privacy policy and terms of service pages indicates a good adherence to standard legal compliance for user interactions.
The infrastructure shows good health with proper DNS resolution, email authentication (SPF and DMARC), and a fast page load. The redirect to vk.com is important contextually, as userapi.com likely serves as an API for the larger VK ecosystem.
Signals Detected
This is one of the most visited websites globally
No structured data markup found
This business has no Trustpilot presence — not unusual for smaller or newer companies
Excessive number of external scripts — may indicate malicious injection
crt.sh returned status 429
Domain created 2008-09-24T18:19:57Z (17 years, 10 months ago)
Registered through Regional Network Information Center, JSC dba RU-CENTER
Expires in 151 days
DNSSEC status from WHOIS
Valid certificate, expires in 336 days
Certificate issued by GlobalSign nv-sa
Connection uses TLS 1.3
Resolves to: 87.240.129.187, 87.240.190.64
Mail servers: mx.vk.com.
Domain has SPF email authentication configured
Domain has DMARC email authentication configured
DNS providers: ns3.vkontakte.ru., ns4.vkontakte.ru., ns1.vkontakte.ru., ns2.vkontakte.ru.
Site has a favicon but no social sharing metadata
robots.txt has 268 directives
Site redirects to https://vk.com/
Web server: kittenx
No threats detected by Google Web Risk
No sitemap found — common for smaller sites
Website is live and responding
Website appears to have contact information
Website has both privacy policy and terms of service pages
No social media links found on homepage
Could not query Wayback Machine
Not found on any DNS blacklists
Fast page load
Stay Safe Online
Good habits to protect yourself, no matter the scan result.
Never reuse passwords across sites.
Add a second layer of security to your accounts.
Always verify unfamiliar stores before entering payment info.