Security Review

Is digitallocker.gov.in legit or a scam?

Our verdict:Safe· 95/100

The official Indian government portal for DigiLocker, featuring a decade-long history and verified registration to the National e-Governance Division.

digitallocker.gov.inScanned 2h ago
0
Trust score
SAFE
Heuristics 94·MT 95
View density

Analysis Summary

Threat Intelligence
0/92
All engines report clean
Domain Age
11 years old
Registered Jan 27, 2015
MT Intelligence
Safe
Low likelihood · 98% confidence
SAFE

No threats detected

All checks passed. This site appears legitimate — but always stay alert for phishing even on trusted domains.

Website Preview

Screenshot of digitallocker.gov.in
LIVE RENDER
digitallocker.gov.in

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site. See full visual analysis →

Visual Screenshot Analysis

We capture a fresh screenshot of the live page and ask a vision model to look for scam visual patterns — fake trust badges, countdown timers, overlay pop-ups, and visual clones of legitimate brands.

50
/ 100
High visual risk

Visual red flags detected in the screenshot

We could not capture a fully-rendered screenshot of this page; visual analysis is inconclusive.

Visual risk50/100

What our vision model saw

1 signal

Screenshot incomplete — site may be slow to render

MT Intelligence

Advanced threat intelligence
MT Security Analyst
Low scam likelihoodengineMT · Guardiantrust95/100
MT AgentLive web researchVisual inspection
0%
Confidence
The domain is the authentic, primary host for India's national digital document wallet. Our analysis confirms it was registered over 11 years ago by the National Informatics Centre and is maintained by the Ministry of Electronics & IT. All technical signals are clean, with zero detections across our antivirus network and major browser blocklists. While some security research notes a high volume of compromised user credentials, this is a reflection of the site's massive scale (700 million users) rather than a flaw in the site's intent. The platform is universally recognized as the legitimate source for digital certificates in India.
Full dossier
Analysis complete

Page Content

The site provides a comprehensive interface for citizens to access government-issued documents like driving licenses and academic marksheets. It features multi-language support and clear links to official mobile applications on the Google Play and Apple App Stores.

Infrastructure

The technical setup is robust, utilizing dedicated government infrastructure and content delivery networks. It loads resources from verified .gov.in subdomains, ensuring a consistent and secure environment for sensitive data handling.

Domain History

Registered in February 2015, the domain has a long-standing reputation and is set to remain active until at least 2027. It is officially registered to the National e-Governance Division (NeGD), confirming its status as a flagship state initiative.

Web Reputation

The site maintains a massive global traffic footprint, ranking among the most visited government portals. While external reports highlight risks from stolen user passwords, these are external threats targeting individual accounts rather than the site itself being a scam.
Risk Factors
2
  • High volume of compromised user credentials reported in external security databases due to the site's massive user base.
  • Frequent target for impersonation by fake mobile apps and phishing sites.
Positive Signals
5
  • Official .gov.in domain extension reserved for Indian government entities.
  • Over 11 years of verified domain age and stable ownership.
  • Zero detections across 92 antivirus engines in our network.
  • Directly managed by the Ministry of Electronics & IT (MeitY).
  • Used by over 700 million registered citizens for official document verification.
AI Recommendation
This site is safe to use for managing your official documents. Always ensure you are on the .gov.in domain and use two-factor authentication to protect your account from credential theft.
Next-gen fraud intelligence
Evidence-backedCross-checked

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for digitallocker.gov.in, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Domain age
11 yrs
Registered Jan 2015
Business registration
Active · India
Site traces back to an actively registered business.
Clone check
Not a clone
No well-known site's layout or branding detected here.
Typosquat check
No look-alike match
The domain doesn't resemble any well-known brand's spelling.
Web mentions
1 scam report · 10 positive
Key findings
7 headline facts from open-web research
  • digitallocker.gov.in is the official website for DigiLocker, a flagship initiative of the Ministry of Electronics & IT (MeitY) under the Digital India programme, powered and maintained by National e-Governance Division (NeGD).
  • Domain registered on 2015-02-16 (over 11 years old) to NeGD (National E-Governance Division), India; expires 2027-02-16; name servers under NIC (National Informatics Centre).
  • The site and official mobile app (published by National e-Governance Division) are repeatedly referenced by government sources, Wikipedia, Google Play, Apple App Store, and PIB as the authentic platform for issuing/verifying digital documen
  • Government warnings exist about numerous fake DigiLocker apps on app stores and phishing attempts impersonating the service; users are directed only to the official app and https://digitallocker.gov.in/.
  • Statistics on official site (as of recent crawl): 70+ crore registered users, 850+ crore documents issued.
  • Some past security research mentions vulnerabilities (e.g. OTP/PIN bypass in older reports) and a large number of stolen credentials associated with the domain (Hudson Rock data); user complaints mainly relate to app functionality rather th
  • Official support available at support.digitallocker.gov.in and helpdesk@negd.in.
Scam reports (1)
Direct quotes from public scam databases, forums, and news.
  • Hudson Rockopen

    "The domain digitallocker.gov.in exhibits a high threat posture, primarily driven by the significant total of 190,628 compromised credentials"

Business registration
Status: active · India

Registered to National e-Governance Division (NeGD), maintained by NeGD under Ministry of Electronics & IT (MeitY), Government of India. WHOIS: Registered 2015-02-16, expires 2027-02-16, registrar National Informatics Centre.

Research summary
Narrative write-up from our AI analyst, grounded on the facts above
Our research confirms digitallocker.gov.in is the official website for DigiLocker, a flagship initiative of the Ministry of Electronics & IT (MeitY) under the Digital India programme. The domain is registered to the National e-Governance Division (NeGD) and has been active since 2015. While security reports from Hudson Rock mention a high number of compromised credentials, these refer to user-end data breaches rather than a site-wide scam. Official government sources and news outlets consistently point to this URL as the only authentic web platform for the service.

Antivirus Engines

Clean pass · verified
Clean across 92 engines

We cross-check every URL against our antivirus network of 92 malware and blacklist engines. None of them flagged this URL in the last scan.

0Malicious0Suspicious60Harmless92Engines
Clean
Kaspersky
Clean
Bitdefender
Clean
Microsoft
Not in pass
ESET-NOD32
Not in pass
Avira
Not in pass
Sophos
Clean
Fortinet
Clean
Google Safebrowsing
Clean
Emsisoft
Clean

No engine detections. The URL passed every antivirus and blacklist engine we queried in this scan. Stay vigilant — AV coverage is only one signal among many.

Security Scans

Blacklist Check
Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Contact Verification

We fetched the page and looked for real-world contact details. Legitimate businesses almost always publish an email on their own domain, a phone number, and a postal address. Scam shops usually don't.

What We Found
No clear contact details on the page
Emails on site's domainNone
Phone numbersNone
Postal addressNot listed
Linked social profiles0
Signal Summary
Several contact red flags
  • No contact email found anywhere on the page.
  • No phone number listed on the page.
  • No postal address visible on the page.

Domain & Encryption

Domain History
Age11 years old
RegistrarNational Informatics Centre
RegisteredJan 27, 2015
ExpiresJan 27, 2027
Owner privacyHidden
Encryption Certificate
StatusValid
ProtocolTLSv1.3
IssuerSectigo Limited · Sectigo Public Server Authentication CA DV R36
ExpiresAug 9, 2026 (48d)
Self-signedNo
Hosting & Technology
HostingAmazon Data Services India
Server locationIN
Web serverDigiLocker
PopularityTop 100k worldwide

Redirect Chain

Hops
1
Cross-domain
Yes
Lookalike
No
Punycode
No
  • 1301http://digitallocker.gov.in/
  • 2200https://www.digilocker.gov.in/cross-domain

Server Reputation

Abuse Intelligence
Confidence score0%
Reports on file0
ISPAmazon Data Services India
Usage typeData Center/Web Hosting/Transit

Still, stay alert

No major threat indicators — but a clean scan does not guarantee every page is safe, and phishing emails routinely spoof real domains.

  • Double-check the exact URL in your address bar

    Confirm you are actually on digitallocker.gov.in and not a lookalike like d-igitallocker.gov.in.com or an IDN homoglyph.

  • Use a password manager

    Password managers only auto-fill on the exact domain they were saved for — they refuse to fill lookalike domains, which is the single best phishing defence.

  • Discuss this site on the forum

    If you have first-hand experience with this site — good or bad — share it with the MalwareTips community.

    Open

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing
Not listedCheck ↗
VirusTotal
Not listedCheck ↗
AbuseIPDB
Not listedCheck ↗

Referenced Domains

Outbound domains this page links to or loads resources from. Each links to its own security scan.

Safety FAQ

Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.

  • Our automated security review found no threat indicators on digitallocker.gov.in. The site appears legitimate based on the signals we checked, but always stay alert for phishing emails that spoof real domains.
  • digitallocker.gov.in passed our automated security checks with a trust score of 95/100. No antivirus engines or major blacklists flagged the site at the time of the last scan.
  • Yes. digitallocker.gov.in presents a valid TLSv1.3 certificate issued by Sectigo Limited · Sectigo Public Server Authentication CA DV R36, expiring in 48 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
  • digitallocker.gov.in is 11.4 years old, registered on 1/27/2015 through National Informatics Centre. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.
  • No. All 92 antivirus engines in our malware network report digitallocker.gov.in as clean.
  • No. digitallocker.gov.in is not currently listed on the major browser blocklist feeds that modern browsers use.
  • digitallocker.gov.in resolves to an IP operated by Amazon Data Services India in IN (usage type: Data Center/Web Hosting/Transit). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
  • Yes. digitallocker.gov.in sits in the global top-100k on Cloudflare Radar, which means it has substantial real-world traffic. That does not automatically make it safe, but established brands almost always rank here and throwaway scam domains almost never do.

Final Verdict

0
Trust / 100
Final Verdict·digitallocker.gov.in
SAFE

This is the official Government of India website for DigiLocker, a secure platform for digital document storage and verification. It is a legitimate public service operated by the Ministry of Electronics & IT.

This site is safe to use for managing your official documents. Always ensure you are on the .gov.in domain and use two-factor authentication to protect your account from credential theft.

AV engines
92
MT passes
2
Net signals
0
Scan another URL
Security review completemalwaretips.com/url-scan
Recently scanned

Other Safe reports

Browse all reports
Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…
Loading comments…
This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.