Is gettyimages.com legit?
This website is trusted. It demonstrates strong foundational security and infrastructure, with its only notable weaknesses being a lack of easily discoverable contact information, social media presence, and a somewhat unusual redirect for initial access.
Stock Media average: 77/100 · based on 31 sites
Checked: April 27, 2026 at 5:49 AM UTC
Is gettyimages.com a scam? Here's what we found.
Excellent security measures are in place, including modern TLS 1.3, a valid SSL certificate from Amazon, HSTS, and robust clickjacking protection, all cleared by Google Web Risk.
The domain is very old and well-established, registered through a corporate domain registrar, clearly indicating a legitimate and long-standing entity behind the website.
The site holds a high Tranco rank, indicating significant traffic and established online presence, and is clean on all DNS blacklists, reinforcing its positive reputation.
While legal pages are present, the absence of obvious contact information on the homepage and no social media links slightly detract from overall transparency, making it harder for users to engage or seek support.
The presence of both a privacy policy and terms of service demonstrates good adherence to legal and user protection standards.
The site has a very well-configured and fast infrastructure with multiple DNS servers, DMARC, and fast page load, though a misconfigured sitemap and an immediate redirect to a bot-wall protected German page are minor points of friction.
Signals Detected
This is a well-known, high-traffic website
Site has structured data markup
Domain created 1999-01-05T05:00:00Z (27 years, 8 months ago)
Registered through CSC Corporate Domains, Inc.
Expires in 252 days
DNSSEC status from WHOIS
Valid certificate, expires in 263 days
Certificate issued by Amazon
Connection uses TLS 1.3
This business has no Trustpilot presence — not unusual for smaller or newer companies
Resolves to: 13.32.121.95, 13.32.121.90, 13.32.121.36, 13.32.121.40
Mail servers: us-smtp-inbound-2.mimecast.com., us-smtp-inbound-1.mimecast.com.
Domain has DMARC email authentication configured
DNS providers: ns-1269.awsdns-30.org., ns-1600.awsdns-08.co.uk., ns-194.awsdns-24.com., ns-692.awsdns-22.net.
Website is live and responding
No obvious contact information found on homepage
Website has both privacy policy and terms of service pages
No social media links found on homepage
crt.sh returned status 502
robots.txt has 67 directives
Site has a favicon but no social sharing metadata
Sitemap URL returns non-XML content
Site redirects to https://www.gettyimages.de/bot-wall?returnUrl=%2F&language=de
Site enforces HTTPS via HSTS
X-Frame-Options: SAMEORIGIN
No threats detected by Google Web Risk
Could not query Wayback Machine
Not found on any DNS blacklists
Fast page load
Stay Safe Online
Good habits to protect yourself, no matter the scan result.
Never reuse passwords across sites.
Add a second layer of security to your accounts.
Always verify unfamiliar stores before entering payment info.