Our 2026 security analysis checked 11 signals for itch.io — including SSL, WHOIS history, and threat databases. View the full risk breakdown in the report above to see how it scored.

We checked itch.io against multiple threat databases, financial-regulator warning lists, and community reports. The full breakdown — including the verdict, flagged signals, and our recommendation — is available in the report on this page.

What is the risk score for itch.io?

The risk score for itch.io is calculated from 11 independent security signals — SSL validity, domain age, WHOIS data, threat-intel databases, and community reports. The score and per-signal breakdown are shown in the report above.

Does itch.io have a valid SSL certificate?

Yes — itch.io presents a valid SSL certificate issued by Google Trust Services. The certificate's issuer, validity window, and chain details are in the report above.

itch.io is registered through 1API GmbH. WHOIS history, name servers, and full ownership signals are listed in the report above.

When was itch.io registered?

itch.io was registered on 2011-10-27. The full WHOIS record — including registrar, name servers, and registrant country — is in the report above.

Is itch.io Safe or a Scam?

Live Analysis

Checked 1 day ago

itch.io

Medium Risk

itch.io shows some warning signals that require attention. We recommend verifying the website independently before sharing sensitive information.

Signals Detected

SSL Certificate

Valid

34.5

/ 100 Risk

Domain Age

14y

Analysis Depth

standard

Report Domain

Risk Breakdown

Valid SSL certificate detected. Issued by Google Trust Services. Expires 9/20/2026.

An SSL certificate encrypts data between your browser and the website. A valid certificate means the connection is secure.

Domain has been registered for 14+ year(s).

Older domains are generally more trustworthy. Scam operations rarely maintain domains for extended periods.

Website is online and responding.

The website was reachable during our scan. An online status alone does not indicate safety.

Content quality — metadata score 95/100, 3/3 legal pages present.

This website has proper metadata and the essential legal pages (terms, privacy, contact).

Detected category: entertainment (low risk).

This website was classified as 'entertainment'. The category risk level reflects how frequently this type of website is associated with online fraud.

No community reports filed against this domain.

Our community has not submitted any fraud reports for this domain.

Analysis depth: standard — matched to this site's category.

All core checks (SSL, WHOIS, DNS, content, technology, threat intelligence) ran. Depth is calibrated to the site's category — lower-risk categories use a lighter fraud-analysis pass than crypto/trading/payment sites. This does NOT mean any step was skipped.

Safety Signals

Status

Online

Safe

SSL Security

Google Trust Services

Safe

Domain Age

14 years

Safe

Registrar

1API GmbH

Info

Country

Info

Content

95/100

Safe

Threat Databases

Clear

Safe

FCA Warning Blacklist Threats Index URLhaus Phishing Patterns Ai Analysis

Regulators

12 checked

Safe

Reviews

1.8/5 (85)

Alert

AI Analysis

Itch.io is an open marketplace and distribution platform for independent digital creators, primarily focusing on indie video games. It allows creators to sell their content, set their own prices, and manage their pages, while also serving as a discovery platform for unique and independent digital creations.

The website content clearly describes a platform for indie game developers to publish and sell their creations. It details the services offered to creators, such as flexible pricing and revenue sharing, and showcases a wide variety of games available for purchase or download. The presence of comprehensive Terms of Service, Privacy Policy, and an About page, along with social media links, all indicate a legitimate and established platform.

• Standard online safety practices apply when making purchases.

WHOIS Information

Registrar

1API GmbH

Registration Date

October 27, 2011

Expiration Date

October 27, 2030

Country

Domain Age

14 years and 8 months

Registrant (domain owner)

Company / organisation

Registrant of itch.io

Address

West Yorkshire

Scam websites often use recently registered domains. A domain registered just days or weeks ago that claims to be an established business is a common red flag.

SSL Certificate

DV validated Free auto-certificate Wildcard

Issued by

Google Trust Services

Validation level

Domain only

Certificate lifespan

90 days (issued Jun 22, 2026)

Covers

2 domains

Public key

ECDSA (secp256r1) 256-bit

Connection

TLSv1.3 (256-bit)

TLS_AES_256_GCM_SHA384

A free, automatically-issued certificate only proves control of the domain — it does not vet the company behind it. Common for legitimate sites, but also trivial for scammers to obtain, so treat HTTPS alone as the bare minimum, not proof of trust.

Company & Operator

Itch Corp

Itch.io is an open marketplace for independent digital creators with a focus on independent video games, enabling anyone to sell the content they've created.

support@itch.io

Legal pages follow best practice — present, substantive, and identify the operator.