Is format.com legit?
Format.com appears to be a mostly safe platform for portfolio creation. While its strong foundational elements inspire confidence, some concerns around excessive external scripts and hidden content warrant user awareness.
Portfolio average: 81/100 · based on 25 sites
Checked: April 18, 2026 at 11:28 AM UTC · Refresh
Is format.com a scam? Here's what we found.
While the SSL certificate and TLS version are excellent, the high number of external scripts presents a potential, albeit unconfirmed, security vulnerability. It's crucial for users to understand that excessive scripts can sometimes lead to performance issues or, less commonly, introduce malicious code if not managed properly.
With a domain age of 30 years, format.com boasts significant longevity, establishing a strong sense of credibility and a long-standing presence online. The domain registration is handled by a reputable corporate registrar, indicating a professional approach to domain management.
The site holds a moderate global traffic rank and is not featured on any DNS blacklists, suggesting a generally good reputation. The absence of a Trustpilot profile is common for niche platforms and doesn't inherently imply a negative standing.
The presence of contact information, legal pages, and social media links demonstrates a commitment to transparency. However, the discovery of numerous hidden elements on the site is a red flag, as this practice can sometimes be used to obscure information from users or search engines.
Format.com has clearly visible privacy and terms of service pages, which are essential for user protection and legal compliance. This indicates a responsible approach to handling user data and outlining service agreements.
The technical infrastructure is robust, featuring modern DNSSEC, strong email authentication (SPF and DMARC), and responsive name servers. This robust setup contributes significantly to the site's reliability and security.
Signals Detected
This site has moderate global traffic
Site uses structured data identifying itself as: BreadcrumbList, WebSite, Organization
This business has no Trustpilot presence — not unusual for smaller or newer companies
Domain created 1995-09-14T04:00:00Z (30 years, 0 months ago)
Registered through CSC Corporate Domains, Inc.
Expires in 147 days
DNSSEC status from WHOIS
Valid certificate, expires in 87 days
Certificate issued by Google Trust Services
Connection uses TLS 1.3
Excessive number of external scripts — may indicate malicious injection
Excessive hidden content found — may indicate cloaking or deceptive content
Web server: cloudflare
No threats detected by Google Web Risk
Resolves to: 104.18.134.62, 104.18.135.62, 104.18.136.62, 104.18.133.62, 104.18.132.62
Mail servers: format-com.mail.protection.outlook.com.
Domain has SPF email authentication configured
Domain has DMARC email authentication configured
DNS providers: woz.ns.cloudflare.com., cheryl.ns.cloudflare.com.
Site has custom branding and social media metadata
robots.txt has 69 directives and references a sitemap
Site maintains a proper sitemap with 13 indexed pages
Website is live and responding
Website appears to have contact information
Website has both privacy policy and terms of service pages
Website links to multiple social media platforms
Could not query Wayback Machine
Not found on any DNS blacklists
Could not query certificate transparency logs
Fast page load
Stay Safe Online
Good habits to protect yourself, no matter the scan result.
Never reuse passwords across sites.
Add a second layer of security to your accounts.
Always verify unfamiliar stores before entering payment info.