Verdict
digilocker.gov.in appears legitimate.
Our checks found nothing pointing to fraud. Ordinary care still applies when you pay or sign in.
| What this site appears to be | Official DigiLocker portal (Government of India) providing secure cloud document storage, issuer/requester partnerships, statistics, app download and support resources. Content describes service, categories of documents, and partner issuers. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | None flagged itVirusTotal | Clear |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0 reportsAbuseIPDB; shared hosting inflates this count | Noted |
| Domain age | 12 years oldRegistered history | Clear |
| Web archive | Never archivedNo public history of this site | Watch |
| Certificate | Encrypted connectionIssued by RapidSSL TLS RSA CA G1 | Noted |
The page as captured
Key findings
- Automated classification: Not Scam.
- Domain age: more than 10 years (registration continuity).
- No flags from the reputation services TrustSniffer consulted at assessment time.
- The operator behind the site could not be independently connected to a real-world brand or person.
Full analysis
Overview
DigiLocker is an apparent Government of India public-service portal that provides citizens with a digital document wallet for storing, sharing, and verifying official records through government departments and partner issuers.
Scam/Impersonation Risk
No contradictions were observed between the site’s stated public-service purpose, its government-facing identity, and the available technical and reputation signals. The homepage presents a coherent service model rather than inducements, investment offers, or commercial pressure, and the assessment found no phishing, impersonation, or malicious-content indicators. Some browser activity and console errors were observed during interaction, but these were not accompanied by hidden forms, credential redirection, wallet-drainer behavior, cloaking, or other abuse patterns; they therefore do not presently alter the low-risk conclusion.
- The homepage identifies DigiLocker as a Government of India service and describes access, sharing, and verification of digital documents.
- The domain was registered on 2015-02-16 and is approximately 11.5 years old.
- External reputation checks recorded 0 malicious detections, 0 suspicious detections, and 0 abuse reports; the domain is ranked 11368 globally and is within the top 1 million.
- The homepage behavior analysis found no hidden forms, external password forms, wallet-connect activity, clipboard hijacking, or cloaking.
Regulatory Verification Notes
The site’s legal and identity presentation is consistent with an established government service: the homepage names the Government of India and provides links to About Us, Terms & Condition Of Use, DigiLocker Policy, Contact, Support/Feedback, and partner-related resources. The supplied evidence does not independently verify the real-world operating entity, so the government attribution should be treated as an apparent identity signal rather than conclusive proof of operator identity. The service is not presented as a financial or third-party regulated offering, and no financial licence number is claimed; this is a scope and disclosure matter rather than evidence of a scam. The available third-party broker-reputation context produced no match.
- The homepage identifies the service as “Government of India” and links to dedicated terms and policy pages.
- The site’s hosting infrastructure is AS16509, Amazon.com, Inc., US.
- The site’s TLS certificate is issued by RapidSSL TLS RSA CA G1, uses DV validation, and is valid through 2027-02-19.
- The site presents partner issuers including public departments and utilities, with document categories such as certificates, health identity cards, electricity bills, admit cards, and marksheets.
What to Verify Next
Before credential or payment interactions, an independent confirmation of the domain and responsible public authority remains appropriate, particularly where a login or application download is reached through an unsolicited message. The Terms & Condition Of Use, DigiLocker Policy, and support/contact channels should be reviewed through the site’s own navigation, while any payment-related request should be assessed under ordinary payment-protection procedures and any applicable return or dispute terms.
- The homepage provides separate navigation to Terms & Condition Of Use and DigiLocker Policy.
- The homepage provides Support/Feedback, Contact, FAQ, and Video Guides resources.
- The homepage includes Login / Register and app-download-related content, making independent confirmation of the access channel relevant before credential submission.
Summary Verdict
Available evidence is consistent with an established, apparently legitimate, low-risk public-service website. Its long operational footprint, coherent government-service content, clean external reputation, and stable protective technical environment support a high-trust posture, while independent verification of the real-world operator identity remains incomplete.
Infrastructure Integrity
The site is protected by AWS CDN/WAF infrastructure, with all observed addresses associated with Amazon edge servers and no origin candidate exposed in the analysis. This is a mitigating infrastructure signal that reduces direct origin exposure, but it is not, by itself, proof of legitimacy.
Closing Assessment
Normal service use is proportionate to the assessed posture, subject to ordinary independent confirmation of the responsible entity, access channel, and applicable protections before credentials or any payment details are submitted.
Written analysis generated 2026-08-17 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
No rule findings contributed to this verdict.
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 55/100 |
| Identity verification confidence | 60% |
- Identity verified on page
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of digilocker.gov.in.
- The request stayed on digilocker.gov.in. It was not redirected to another domain. Clear
- Registration is published under National Informatics Centre. Clear
- DNS for this domain is served by nic.in, across 4 name servers. Noted
- The registration is paid up to 2027-02-16. Noted
- It is hosted on AMAZON-02, from a server in US. Noted
Domain intelligence
| Registrar | National Informatics Centre |
|---|---|
| Hosting | AMAZON-02 - Amazon.com, Inc., US |
| Country | US |
| Server IP | 2600:9000:278f:b200:10:b32f:1cc0:93a1 |
| Name servers | ns7.nic.in, ns1.nic.in, ns10.nic.in, ns2.nic.in |
| SSL issuer | RapidSSL TLS RSA CA G1 |
| SSL expiry | 2027-02-19 |
| Domain age | 11.50 years (continuous registration) |
| Domain expiry | 2027-02-16 |
| Archive first seen | Not available |
| Archive snapshots | 0 |
| Reputation | VirusTotal: 0 flagged | AbuseIPDB: 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about digilocker.gov.in at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.