Is unsplash.com legit?
Unsplash.com is generally a sound platform with strong technical foundations and a long operational history, but real concerns exist. The immediate need for domain renewal and missing legal pages are significant red flags that could impact user trust and legal standing.
Stock Media average: 74/100 · based on 31 sites
Checked: April 21, 2026 at 8:17 PM UTC
Is unsplash.com a scam? Here's what we found.
Robust security measures are in place, including a valid SSL certificate from a reputable issuer, a modern TLS version, and a clean record with Google Web Risk, ensuring a secure connection for users.
This domain benefits from a strong identity due to its age and high Tranco rank, indicating a long-standing and widely recognized presence. However, the rapidly approaching domain expiry is a notable concern that requires immediate attention.
The site has a very high global ranking and is not blacklisted, showing a strong general reputation. However, the current HTTP 401 status indicates a significant and immediate functional issue that impacts usability and trust.
Basic contact information is available, which is a good baseline for transparency. However, the absence of social media links on the homepage and minimal branding suggest opportunities for improved public engagement and clarity.
A major compliance gap exists due to the complete absence of crucial legal pages, such as a privacy policy or terms of service. This is a significant issue for user protection and legal standing.
The site boasts a well-configured and reliable infrastructure, with multiple IP addresses for DNS resolution, strong email authentication via SPF and DMARC, and a fast page load time, indicating a well-managed technical backend.
Signals Detected
No structured data markup found
This is one of the most visited websites globally
This business has no Trustpilot presence — not unusual for smaller or newer companies
Domain created 2013-05-29T21:20:47Z (12 years, 0 months ago)
Registered through 1API GmbH
Expires in 38 days
DNSSEC status from WHOIS
Valid certificate, expires in 262 days
Certificate issued by GlobalSign nv-sa
Connection uses TLS 1.2
Resolves to: 151.101.1.181, 151.101.129.181, 151.101.65.181, 151.101.193.181
Mail servers: aspmx.l.google.com., alt2.aspmx.l.google.com., alt1.aspmx.l.google.com., alt3.aspmx.l.google.com., alt4.aspmx.l.google.com.
Domain has SPF email authentication configured
Domain has DMARC email authentication configured
DNS providers: ns1.dnsimple.com., ns2.dnsimple-edge.net., ns3.dnsimple.com., ns4.dnsimple-edge.org.
robots.txt has 250 directives and references a sitemap
Site has a favicon but no social sharing metadata
Site enforces HTTPS via HSTS
No threats detected by Google Web Risk
No sitemap found — common for smaller sites
Website returned status 401
Website appears to have contact information
No privacy policy or terms of service found
No social media links found on homepage
Could not query Wayback Machine
Not found on any DNS blacklists
Could not query certificate transparency logs
Fast page load
Embed This Badge
Stay Safe Online
Good habits to protect yourself, no matter the scan result.
Never reuse passwords across sites.
Add a second layer of security to your accounts.
Always verify unfamiliar stores before entering payment info.