Is envato.com legit?
This website is largely trusted, with strong technical infrastructure and a long-standing online presence. However, it should improve its legal disclosures and consider reducing external scripts for enhanced security.
Stock Media average: 77/100 · based on 31 sites
Checked: April 27, 2026 at 6:37 AM UTC
Is envato.com a scam? Here's what we found.
The site benefits from modern TLS version 1.3, valid SSL, and is clean according to Google Web Risk, indicating good baseline security. However, the high number of external scripts introduces a potential vulnerability.
With a 19-year domain age and registration through a reputable registrar like MarkMonitor, the site exhibits a strong and clearly established identity, consistent with a legitimate, long-term operation.
The site holds a high Tranco rank, indicating significant traffic and established presence. It is clean on DNS blacklists, which reinforces a positive reputation, despite the absence of a Trustpilot profile.
Envato.com provides clear contact information and maintains a solid social media presence. Complete branding and a present robots.txt further contribute to its transparent operational practices.
While the site has a Content Security Policy and Clickjacking Protection, the omission of a complete set of legal pages (privacy policy or terms of service) is a notable compliance gap that needs addressing.
The website demonstrates robust infrastructure with DNSSEC, DMARC, numerous MX records, and reliable DNS resolution via Cloudflare, ensuring strong email and domain integrity.
Signals Detected
This is a well-known, high-traffic website
Site uses structured data identifying itself as: WebSite
Domain created 2006-07-26T13:32:22Z (19 years, 0 months ago)
Registered through MarkMonitor Inc.
Expires in 90 days
DNSSEC status from WHOIS
Valid certificate, expires in 59 days
Certificate issued by Google Trust Services
Connection uses TLS 1.3
Excessive number of external scripts — may indicate malicious injection
This business has no Trustpilot presence — not unusual for smaller or newer companies
Resolves to: 104.16.239.191, 104.18.208.202
Mail servers: aspmx.l.google.com., alt1.aspmx.l.google.com., alt2.aspmx.l.google.com., aspmx2.googlemail.com., aspmx4.googlemail.com., aspmx3.googlemail.com., aspmx5.googlemail.com.
Domain has DMARC email authentication configured
DNS providers: dell.ns.cloudflare.com., nile.ns.cloudflare.com.
Site has Content Security Policy configured
X-Frame-Options: SAMEORIGIN
Web server: cloudflare
No threats detected by Google Web Risk
crt.sh returned status 429
Site has custom branding and social media metadata
Sitemap found with 4 entries
robots.txt has 11 directives and references a sitemap
Website is live and responding
Website appears to have contact information
Website is missing either privacy policy or terms of service
Website links to multiple social media platforms
Could not query Wayback Machine
Not found on any DNS blacklists
Fast page load
Embed This Badge
Stay Safe Online
Good habits to protect yourself, no matter the scan result.
Never reuse passwords across sites.
Add a second layer of security to your accounts.
Always verify unfamiliar stores before entering payment info.