Security Review

Is envato.com legit or a scam?

Our verdict:Suspicious· 55/100

Established creative marketplace with legitimate business registration, but multiple complaints about unexpected charges, no-refund policies, and product quality issues.

envato.comScanned 2d ago
0
Trust score
SUSPICIOUS
Heuristics 100·MT 58
Category tags
marketplacedigital-assets#Subscription Trap72% MT confidence
Warning signals (1)

These checks passed — but they don't clear the site. A clean antivirus result, valid SSL, and a calm server only mean it isn't hosting malware; they say nothing about whether the business is real. This verdict is based on the site's conduct and content, not a malware detection.

View density

Analysis Summary

Threat Intelligence
0/92
All engines report clean
Domain Age
20 years old
Registered Jul 26, 2006
MT Intelligence
Suspicious
Moderate likelihood · 72% confidence
SUSPICIOUS

Warning signs detected

Several risk indicators suggest caution. This site might be legitimate — but treat it as unverified until you can independently confirm.

Website Preview

Screenshot of envato.com
LIVE RENDER
envato.com

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site.

MT Intelligence

Advanced threat intelligence
MT Security Analyst
Moderate scam likelihoodengineMT · Guardiantrust58/100
MT AgentLive web researchVisual inspection
0%
Confidence
Envato.com is a genuine, long-established business — registered in 2006, actively owned by Shutterstock since 2024, and verified as Envato Pty Ltd in Australia's business registry. Our antivirus network and browser blocklists show no malware or phishing flags, and the domain infrastructure is clean. However, the evidence package contains six scam reports and five complaints concentrated on billing practices and refund denial. Users report being charged $880 instead of the advertised $16.95 monthly rate, receiving non-working themes with missing files, and facing refusal to refund. While positive reviews praise the asset library's size and organization, the negative feedback consistently targets the company's subscription model, product quality control, and customer-service responsiveness. The complaints do not suggest envato.com itself is a phishing or malware operation — rather, they reflect frustration with marketplace policies and third-party seller accountability. This pattern is typical of legitimate but controversial subscription services with aggressive billing and restrictive refund terms.
Full dossier
Analysis complete

Page Content

Envato operates a legitimate creative digital-asset marketplace (ThemeForest, Elements, GraphicRiver, etc.) offering templates, themes, graphics, and plugins. The company maintains official help pages warning users about phishing emails and fake login sites that mimic envato.com.

Infrastructure

Domain registered July 2006 (over 19 years old). SSL certificate valid, issued by Google Trust Services, with 71 days to expiry. Hosting IP 104.18.208.202 has zero abuse reports and a clean reputation score. No malware, phishing, or browser-blocklist flags detected across our antivirus network.

Domain History

Registrant is Shutterstock, Inc., following the 2024 acquisition of Envato Pty Ltd for $245 million. Business registration confirmed: Envato Pty Ltd (ABN 11 119 159 741), active since 6 April 2006 in Victoria, Australia. Domain status includes client delete/transfer prohibited, indicating active corporate ownership.

Web Reputation

Mixed but polarized: positive reviews highlight the breadth and organization of the asset library (TechRadar, StockPhotoSecrets); negative reviews on ProductReview.com.au, Reddit, and blogs focus on unexpected billing charges (e.g., $880 instead of $16.95/month), refusal to refund non-working products, poor customer support, and copyright claims on licensed music. No evidence that envato.com itself is a phishing or malware vector; complaints target marketplace practices and third-party seller quality.

Risk Factors
5
  • Six scam reports and five complaints in the evidence package, primarily about unexpected billing charges and no-refund policies.
  • Users report being charged significantly more than advertised (e.g., $880 for a $16.95/month subscription) with difficulty obtaining refunds.
  • Multiple complaints about non-working or incomplete products (missing theme files) and poor customer-service responsiveness.
  • Subscription model with aggressive billing and restrictive refund terms creates friction and user frustration.
  • Copyright and licensing disputes reported on Elements music library, suggesting quality-control gaps.
Positive Signals
5
  • Domain registered in 2006 (over 19 years old) with consistent business operation and brand recognition.
  • Legitimate Australian business registration (Envato Pty Ltd, ABN 11 119 159 741, active since 2006) and acquisition by Shutterstock for $245 million in 2024.
  • Clean antivirus scan (0/92 engines flagged), no browser-blocklist hits, and valid SSL certificate.
  • Positive reviews praise the size, organization, and variety of the asset library (TechRadar, StockPhotoSecrets).
  • Official help pages warn users about phishing emails and fake login sites, demonstrating security awareness.
AI Recommendation
Envato is a legitimate business, but review the subscription terms, refund policy, and product reviews carefully before purchasing. If you subscribe, monitor your billing statements closely and contact support immediately if you are charged more than advertised. Do not enter payment details on any site claiming to be Envato unless the URL is exactly envato.com and the SSL certificate is valid.
Next-gen fraud intelligence
Evidence-backedCross-checked

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for envato.com, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Domain age
19 yrs
Registered Jul 2006
Business registration
Active · Australia
Site traces back to an actively registered business.
Clone check
Not a clone
No well-known site's layout or branding detected here.
Typosquat check
No look-alike match
The domain doesn't resemble any well-known brand's spelling.
Web mentions
6 scam reports · 5 complaints · 3 positive
Key findings
7 headline facts from open-web research
  • Domain registered July 2006 (over 19 years old); currently owned by Shutterstock, Inc. following 2024 acquisition of Envato Pty Ltd for $245 million.
  • Legitimate Australian company (Envato Pty Ltd ABN 11 119 159 741, active since 2006, based in Melbourne).
  • Operates major creative marketplace (ThemeForest, Elements) with millions of assets; official help pages warn users about phishing emails and fake login sites mimicking envato.com.
  • Significant user complaints on ProductReview.com.au, Reddit, PissedConsumer, and blogs about non-working themes, no refunds, unexpected charges, poor support, and copyright claims on Elements music.
  • Mixed reviews: positive for asset library size/organization (TechRadar, G2); negative for product quality, refund policy, and customer service (Trustpilot mentions negative product experiences; some call it "scam" for marketplace issues).
  • No evidence of envato.com itself being a phishing or malware site; complaints target marketplace practices and third-party seller quality rather than the platform being fraudulent.
  • Whois shows registrant as Shutterstock, Inc.; status includes client delete/transfer prohibited.
Scam reports (6)
Direct quotes from public scam databases, forums, and news.
  • ProductReview.com.auopen

    "Envato is a scammer company don't waste your money, They claim unlimited downloads, but copyright claims often arise."

  • ProductReview.com.auopen

    "This website is a scam. It said $16.95 month and they took out a whole $880 they said it’s for the year. ... Wouldn’t refund me."

  • ProductReview.com.auopen

    "Envato market also known as theme forest is Total SCAM website Purchased a theme and it’s not working and missing files , when asked for refund the reply is rude and never refunded."

  • Redditopen

    "Taking money, not delivering the promised goods/services and not giving the money back isn't a legitimate business model. It's scam."

  • devsmint.comopen

    "While Envato isn't an outright scam, it functions like one. ... No refunds, even for broken products."

Positive reviews (3)
Quotes indicating the site is legitimate.
  • StockPhotoSecretsopen

    "Envato Market is a legitimate online marketplace for digital assets such as website themes, templates, graphics, and plugins. ... Envato's reputation in the digital marketplace is undeniably legitimate and safe."

  • TechRadaropen

    "Envato Elements offers a wide selection of media, all well-organized with very well implemented filters. ... Still, it’s well worth checking out."

  • KripeshAdwani.comopen

    "after buying it twice and using it for more than a year I can say that it is DEFINITELY worth every penny!"

Business registration
Status: active · Australia

Envato Pty Ltd (ABN 11 119 159 741), registered since 6 Apr 2006 in VIC. Acquired by Shutterstock in 2024 for $245M; also Envato Elements Pty Ltd (ACN 613 824 258) registered 2016.

Research summary
Narrative write-up from our AI analyst, grounded on the facts above

ProductReview.com.au, Reddit, and independent blogs report recurring complaints: unexpected billing charges (users charged $880 instead of advertised $16.95/month), refusal to refund non-working products, missing theme files, poor customer support, and copyright claims on Elements music. One user stated 'Taking money, not delivering the promised goods/services and not giving the money back isn't a legitimate business model. It's scam.' However, positive reviews from TechRadar and StockPhotoSecrets confirm Envato's legitimacy as an established marketplace and praise the breadth and organization of its asset library. The evidence does not suggest envato.com itself is a phishing or malware operation; complaints target the company's subscription billing practices, refund policy, and third-party seller accountability rather than the platform being fraudulent.

Antivirus Engines

Clean pass · verified
Clean across 92 engines

We cross-check every URL against our antivirus network of 92 malware and blacklist engines. None of them flagged this URL in the last scan.

0Malicious0Suspicious61Harmless92Engines
Clean
Kaspersky
Clean
Bitdefender
Clean
Microsoft
Not in pass
ESET-NOD32
Not in pass
Avira
Not in pass
Sophos
Clean
Fortinet
Clean
Google Safebrowsing
Clean
Emsisoft
Clean

No engine detections. The URL passed every antivirus and blacklist engine we queried in this scan. Stay vigilant — AV coverage is only one signal among many.

Security Scans

Blacklist Check
Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Domain & Encryption

Domain History
Age20 years old
RegistrarMarkMonitor Inc.
RegisteredJul 26, 2006
ExpiresJul 26, 2026
Owner privacyVisible
Encryption Certificate
StatusValid
ProtocolTLSv1.3
IssuerGoogle Trust Services · WE1
ExpiresAug 23, 2026 (71d)
Self-signedNo
Hosting & Technology
HostingCloudflare, Inc.
Server locationUS
PopularityTop 100k worldwide

Redirect Chain

Hops
2
Cross-domain
Yes
Lookalike
No
Punycode
No
  • 1301http://envato.com/
  • 2301https://envato.com/
  • 3403https://elements.envato.com/cross-domain

Server Reputation

Abuse Intelligence
Confidence score0%
Reports on file0
ISPCloudflare, Inc.
Usage typeContent Delivery Network

Proceed with caution

Our automated review flagged enough risk that you should treat this site as unverified.

  • Treat envato.com as unverified

    Do not enter credentials or send money until you have independently verified the business.

  • Verify the business through independent channels

    Check the company's social profiles, registry records, and search for recent news or reviews that are not hosted on the site itself.

  • Never use irreversible payment methods

    Crypto, gift cards, wire transfers, and cash apps offer zero buyer protection. Use a credit card or PayPal if you must pay.

  • Share your experience

    If you have additional context, drop a comment below or post on the MalwareTips forum.

    Open

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing
Not listedCheck ↗
VirusTotal
Not listedCheck ↗
AbuseIPDB
Not listedCheck ↗

Safety FAQ

Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.

  • Our automated security review marked envato.com as suspicious. Several warning signs were detected; it may still turn out legitimate, but you should verify it through independent channels before trusting it with money or credentials.
  • envato.com currently scores 55/100 on our trust scale. We found enough warning signals to recommend caution. Verify the site through independent channels before entering credentials or money.
  • Yes. envato.com presents a valid TLSv1.3 certificate issued by Google Trust Services · WE1, expiring in 71 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
  • envato.com is 19.9 years old, registered on 7/26/2006 through MarkMonitor Inc.. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.
  • No. All 92 antivirus engines in our malware network report envato.com as clean.
  • No. envato.com is not currently listed on the major browser blocklist feeds that modern browsers use.
  • envato.com resolves to an IP operated by Cloudflare, Inc. in US (usage type: Content Delivery Network). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
  • Yes. envato.com sits in the global top-100k on Cloudflare Radar, which means it has substantial real-world traffic. That does not automatically make it safe, but established brands almost always rank here and throwaway scam domains almost never do.

Final Verdict

0
Trust / 100
Final Verdict·envato.com
SUSPICIOUS

Envato is a legitimate 19-year-old Australian creative marketplace acquired by Shutterstock in 2024, but carries significant user complaints about billing disputes, non-refundable purchases, and poor customer service that warrant caution before subscribing.

Envato is a legitimate business, but review the subscription terms, refund policy, and product reviews carefully before purchasing. If you subscribe, monitor your billing statements closely and contact support immediately if you are charged more than advertised. Do not enter payment details on any site claiming to be Envato unless the URL is exactly envato.com and the SSL certificate is valid.

AV engines
92
MT passes
2
Net signals
0
Scan another URL
Security review completemalwaretips.com/url-scan
Recently scanned

Other Suspicious reports

Browse all reports
Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…
Loading comments…
This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.