Is artstation.com legit?
ArtStation appears mostly safe, boasting a long domain history and robust infrastructure. However, the lack of accessible contact information, legal pages like a privacy policy, and social media presence, combined with a 403 error on initial access, raises concerns about its transparency and compliance.
Portfolio average: 81/100 · based on 25 sites
Checked: April 18, 2026 at 7:55 AM UTC · Refresh
Is artstation.com a scam? Here's what we found.
Excellent security hygiene, featuring modern TLS 1.3 encryption, robust HTTPS enforcement via HSTS, and protection against clickjacking. Google's Web Risk assessment found the site clean.
A deeply established online presence, with a domain aged over 20 years and registered through a reputable registrar like MarkMonitor, strongly indicating a legitimate and long-standing entity.
High traffic indicates a very well-known platform, reinforcing its general reputation. The domain is clean on all DNS blacklists, suggesting no history of malicious activity.
This is a significant weak point; the site returns a 403 error, making it difficult to access directly, and critical elements like contact information and social media links are notably absent, hindering user trust and communication.
A major concern, as the absence of both a privacy policy and terms of service is a serious compliance oversight, especially for a site that likely hosts user-generated content or collects personal data.
Solid foundational infrastructure, utilizing Cloudflare for its server and DNS, ensuring fast resolution and email authentication with SPF and DMARC records.
Signals Detected
This is a well-known, high-traffic website
No structured data markup found
This business has no Trustpilot presence — not unusual for smaller or newer companies
Domain created 2005-05-14T18:06:39Z (20 years, 2 months ago)
Registered through MarkMonitor Inc.
Expires in 757 days
DNSSEC status from WHOIS
crt.sh returned status 429
Site enforces HTTPS via HSTS
X-Frame-Options: SAMEORIGIN
Web server: cloudflare
No threats detected by Google Web Risk
No sitemap found — common for smaller sites
Valid certificate, expires in 57 days
Certificate issued by Google Trust Services
Connection uses TLS 1.3
Website returned status 403
No obvious contact information found on homepage
No privacy policy or terms of service found
No social media links found on homepage
Resolves to: 104.19.170.40, 104.19.169.40
Mail servers: aspmx.l.google.com., alt2.aspmx.l.google.com., alt1.aspmx.l.google.com., alt4.aspmx.l.google.com., alt3.aspmx.l.google.com.
Domain has SPF email authentication configured
Domain has DMARC email authentication configured
DNS providers: chin.ns.cloudflare.com., dom.ns.cloudflare.com.
Site has a favicon but no social sharing metadata
Not found on any DNS blacklists
robots.txt has 20 directives and references a sitemap
Could not query Wayback Machine
Fast page load
Stay Safe Online
Good habits to protect yourself, no matter the scan result.
Never reuse passwords across sites.
Add a second layer of security to your accounts.
Always verify unfamiliar stores before entering payment info.