xkcd.com is one of the best-known webcomics on the internet, created by Randall Munroe. It has been running since 2003, which alone tells you a lot about its legitimacy — scam sites rarely last that long. The domain is ranked among the top 4,000 most visited sites globally, and its web archive history goes back 20 years with no red flags. For a personal project like this, it's normal not to find a formal privacy policy or contact page; the site doesn't ask for your personal information or process payments. If you're wondering whether xkcd.com is a scam, the evidence says no — it's a genuine, well-loved creative work. Whether you're a longtime fan or new to the comic, you can browse with confidence.
In plain English
xkcd.com is a long-running, beloved webcomic with a spotless track record. The domain has been active for over two decades, and there are no signs of malicious activity or deception. It's safe to browse and enjoy.
Cross-referenced 34 live signals from Google Safe Browsing, VirusTotal, WHOIS and more on Jul 3, 2026.
How we score →
Where the score comes from
We look at six areas. Here's how xkcd.com did in each.
85
Security
Solid encryption with a valid certificate from a reputable issuer. The lack of browser-level protections like clickjacking prevention is typical for a site that doesn't handle logins or payments.
85
Identity
The domain is over 23 years old and registered through a major registrar. While the exact owner isn't publicly listed, that's completely normal for a personal project.
95
Reputation
A stellar reputation: over 20 years of continuous web archive history, clean on all blacklists, and ranked among the top 4,000 most-visited sites globally. This is not a fly-by-night operation.
80
Transparency
The site has a clear about page and links to social media accounts. The absence of a dedicated contact page is expected for a hobby site, not a red flag.
85
Compliance
No privacy policy or terms of service are published, but for a non-commercial webcomic that doesn't collect user data or process payments, that's standard and not a concern.
80
Infrastructure
The site uses a CDN and multiple mail servers, with solid DNS configuration. The lack of DNSSEC is a minor oversight, but overall the technical setup supports fast, reliable delivery.
What we checked
The 34 signals behind this report.
Security & Transport
Certificate Issuer
GlobalSign nv-sa
Google Web Risk
Clean
SSL Certificate
Valid
Security Headers
0 of 6
Server
nginx
TLS Version
TLS 1.2
Identity & WHOIS
About Page
Found
Branding
Complete
Business Disclosure
Not found
Contact Info
Not found
Domain Age
23 years, 9 months
Domain Expiry
2027-01-26T02:25:10Z
Legal Pages
Missing
Registrar
GoDaddy.com, LLC
Infrastructure & DNS
CDN
Cloud.ru / Selectel / generic
DMARC Record
p=none (monitoring only)
DNS Blacklists
Clean
DNS Resolution
8 IP(s)
DNSSEC
Not enabled
DNSSEC
unsigned
Email (MX Records)
7 record(s)
Hosting Network (ASN)
AS54113 FASTLY
Name Servers
4 server(s)
Page Load Time
44ms
SPF Record
Present
Reputation & Reach
Page Title
xkcd: Holes
Sitemap
Not found
Social Media Presence
3 platforms
Structured Data
None found
Tranco Rank
Rank #3732
Trustpilot
No Trustpilot profile
Web Archive History
20 years
Website Status
Online
robots.txt
Present
Run this site? Show your score.
Add a trust badge so visitors can see your live score for themselves.
Get your badge →verified.fyi
xkcd.com
85
This site checks out. Stay covered everywhere: NordVPN's Threat Protection blocks known scam sites before they load.
Try NordVPN →
More Personal Blog sites
How similar sites score. See all →