Is who.int legit?
This site appears to be highly trustworthy. While there are a few minor technical issues like excessive scripts and a misconfigured sitemap, its strong web presence, robust security measures, and clear identity make it a reliable source.
Government average: 80/100 · based on 33 sites
Checked: April 21, 2026 at 4:37 AM UTC
Is who.int a scam? Here's what we found.
The site has a strong security posture with modern TLS 1.3, HSTS, and a Content Security Policy. The primary concern is the high number of external scripts, which introduces potential vulnerabilities.
The Tranco rank indicates a highly visible and established entity. The specific WHOIS information for .int TLDs is often not publicly available, so the check failure here is not a red flag.
With a 27-year history and high Tranco rank, the site demonstrates strong longevity and established reputation. It is also clean on all DNS blacklists and verified by Google Web Risk.
The website provides clear contact information and links to multiple social media platforms, indicating a transparent and accessible organization.
The presence of both privacy policy and terms of service pages demonstrates a commitment to legal and user privacy compliance.
The site has solid email authentication with SPF and DMARC. The only minor technical flaw is a misconfigured sitemap, but DNS resolution and overall network performance are good.
Signals Detected
This is one of the most visited websites globally
Site uses structured data identifying itself as: WebSite, Organization
This business has no Trustpilot presence — not unusual for smaller or newer companies
Excessive number of external scripts — may indicate malicious injection
crt.sh returned status 429
Valid certificate, expires in 73 days
Certificate issued by Google Trust Services
Connection uses TLS 1.3
Resolves to: 192.133.11.1
Mail servers: who-int.mail.protection.outlook.com.
Domain has SPF email authentication configured
Domain has DMARC email authentication configured
DNS providers: ns1.wpro.who.int., whqdns1.who.int., ext-dns-2.cern.ch., whqdns2.who.int., whqdns3.who.int.
robots.txt has 1055 directives and references a sitemap
Site enforces HTTPS via HSTS
Site has Content Security Policy configured
X-Frame-Options: SAMEORIGIN
Web server: cloudflare
No threats detected by Google Web Risk
Site has custom branding and social media metadata
no WHOIS server found for TLD "int"
Sitemap URL returns non-XML content
Website is live and responding
Website appears to have contact information
Website has both privacy policy and terms of service pages
Website links to multiple social media platforms
Earliest archive snapshot from 19981206
Not found on any DNS blacklists
Fast page load
Stay Safe Online
Good habits to protect yourself, no matter the scan result.
Never reuse passwords across sites.
Add a second layer of security to your accounts.
Always verify unfamiliar stores before entering payment info.