Is poshmark.com legit?
Poshmark.com appears to be a trusted platform with a strong web presence and robust security measures. While there are minor gaps in transparency due to bot protection and some basic branding, its long domain history, good technical setup, and high traffic rank instill confidence.
Marketplace average: 77/100 · based on 15 sites
Checked: April 28, 2026 at 12:50 PM UTC
Is poshmark.com a scam? Here's what we found.
The site boasts a modern TLS 1.3 connection from a valid Amazon certificate, combined with HSTS and CSP headers, indicating a strong commitment to secure user connections. It’s also clean according to Google Web Risk, reinforcing its security posture, though the lack of structured data is a minor missed opportunity for SEO visibility and potentially for search engine trust signals.
With a domain active for over 14 years and a future expiry date in 2029, Poshmark demonstrates strong and stable identity. The WHOIS information is public, showcasing transparency about ownership, which is a significant positive for trust.
A high Tranco rank of #3918 confirms Poshmark's substantial online visibility and traffic, underscoring its established reputation. The absence from DNS blacklists further validates its clean standing in the online community.
While the site has legal pages, the bot protection preventing checks on contact info and social media presence, along with basic branding and a missing sitemap, slightly detracts from overall transparency. These are minor but notable areas for improvement in communicating directly with users and search engines.
The presence of both a privacy policy and terms of service pages indicates a commitment to user rights and legal compliance, which is crucial for any legitimate online platform.
The robust DNS setup with multiple IP addresses and name servers, coupled with DMARC email authentication, suggests a well-maintained and reliable infrastructure. The lack of DNSSEC is a minor weakness, but overall, the technical foundation is solid and performs with fast page loads.
Signals Detected
No structured data markup found
This is a well-known, high-traffic website
Domain created 2011-05-10T19:12:13Z (14 years, 2 months ago)
Registered through GoDaddy.com, LLC
Expires in 1108 days
DNSSEC status from WHOIS
Valid certificate, expires in 176 days
Certificate issued by Amazon
Connection uses TLS 1.3
This business has no Trustpilot presence — not unusual for smaller or newer companies
Resolves to: 52.222.136.119, 52.222.136.42, 52.222.136.62, 52.222.136.94
Mail servers: aspmx.l.google.com., alt1.aspmx.l.google.com., alt2.aspmx.l.google.com., aspmx2.googlemail.com., aspmx3.googlemail.com.
Domain has DMARC email authentication configured
DNS providers: ns-1517.awsdns-61.org., ns-1649.awsdns-14.co.uk., ns-362.awsdns-45.com., ns-724.awsdns-26.net.
Not found on any DNS blacklists
robots.txt has 44 directives
Site has a favicon but no social sharing metadata
Site enforces HTTPS via HSTS
Site has Content Security Policy configured
Web server: Version 1.0
No threats detected by Google Web Risk
No sitemap found — common for smaller sites
Website returned HTTP 403 — likely WAF or bot protection blocking automated checks. The site is online but restricts non-browser access.
Bot protection prevented page inspection
Website has both privacy policy and terms of service pages
Bot protection prevented page inspection
Could not query Wayback Machine
Could not query certificate transparency logs
Fast page load
Embed This Badge
Stay Safe Online
Good habits to protect yourself, no matter the scan result.
Never reuse passwords across sites.
Add a second layer of security to your accounts.
Always verify unfamiliar stores before entering payment info.