Score Breakdown

How we calculated the Flare Score based on positive and negative signals.

Positive Signals

Valid SSL certificate from Google Trust Services

Established domain (17+ years old)

WHOIS information publicly available

Not found on any blacklist (1 sources checked)

Strong email security (SPF, DKIM, DMARC configured)

Privacy policy present

Modern security headers configured (HSTS, CSP)

Good website performance

Active social media presence

Built with Shopify (established platform)

Uses CDN for better performance and security

Negative Signals

Pro Tip: A valid SSL certificate is a basic requirement for any trustworthy site, but it doesn't guarantee the site is not a scam.

SSL & Security

SSL certificate and security headers configuration

Security Score

80/100

⚠ SSL Expired (20) ✓ HSTS (20) ✓ CSP (20) ✓ X-Frame (20)

SSL Certificate

Issuer

Google Trust Services

Valid From

Oct 21, 2025

Valid Until

Jan 20, 2026

Certificate Expired

Security Headers

HSTS

CSP

X-Frame-Options

Domain & WHOIS Information

Domain Age

17 years 9 months

Registered Apr 15, 2008

Very High Trust

Apr 2008 Expires Apr 2026

Established domain (5+ years) - High trust indicator

Registrar

Tucows Domains

Registration Date

Apr 15, 2008 (17 years ago)

Last Updated

Apr 17, 2025

Expiration Date

Apr 15, 2026 (85 days remaining)

Server Location

Canada

Abuse Contact

N/A

   Domain Name: DAVIDSTEA.COM
   Registry Domain ID: 1450533836_DOMAIN_COM-VRSN
   Registrar WHOIS Server: whois.tucows.com
   Registrar URL: http://www.tucows.com
   Updated Date: 2025-04-17T13:31:50Z
   Creation Date: 2008-04-15T20:19:48Z
   Registry Expiry Date: 2026-04-15T20:19:48Z
   Registrar: Tucows Domains Inc.
   Registrar IANA ID: 69
   Registrar Abuse Contact Email: [email protected]
   Registrar Abuse Contact Phone: +1.4165350123
   Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
   Domain Status: clientUpdateProhibited https://icann.org/epp#clientUpdateProhibited
   Name Server: COLLINS.NS.CLOUDFLARE.COM
   Name Server: GRANT.NS.CLOUDFLARE.COM
   DNSSEC: unsigned
   URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/
>>> Last update of whois database: 2025-12-07T21:07:44Z <<<

For more information on Whois status codes, please visit https://icann.org/epp

NOTICE: The expiration date displayed in this record is the date the
registrar's sponsorship of the domain name registration in the registry is
currently set to expire. This date does not necessarily reflect the expiration
date of the domain name registrant's agreement with the sponsoring
registrar.  Users may consult the sponsoring registrar's Whois database to
view the registrar's reported date of expiration for this registration.

TERMS OF USE: You are not authorized to access or query our Whois
database through the use of electronic processes that are high-volume and
automated except as reasonably necessary to register domain names or
modify existing registrations; the Data in VeriSign Global Registry
Services' ("VeriSign") Whois database is provided by VeriSign for
information purposes only, and to assist persons in obtaining information
about or related to a domain name registration record. VeriSign does not
guarantee its accuracy. By submitting a Whois query, you agree to abide
by the following terms of use: You agree that you may use this Data only
for lawful purposes and that under no circumstances will you use this Data
to: (1) allow, enable, or otherwise support the transmission of mass
unsolicited, commercial advertising or solicitations via e-mail, telephone,
or facsimile; or (2) enable high volume, automated, electronic processes
that apply to VeriSign (or its computer systems). The compilation,
repackaging, dissemination or other use of this Data is expressly
prohibited without the prior written consent of VeriSign. You agree not to
use electronic processes that are automated and high-volume to access or
query the Whois database except as reasonably necessary to register
domain names or modify existing registrations. VeriSign reserves the right
to restrict your access to the Whois database in its sole discretion to ensure
operational stability.  VeriSign may restrict or terminate your access to the
Whois database for failure to abide by these terms of use. VeriSign
reserves the right to modify these terms at any time.

The Registry database contains ONLY .COM, .NET, .EDU domains and
Registrars.

DNS Configuration

Domain Name System records and email security configuration

Email Security

SPF

DKIM

DMARC

Basic

1

A

1

AAAA

1

MX

10

TXT

2

NS

                                                            v=spf1 mx ip4:209.53.109.51 ip4:173.243.195.66 ip4:173.246.70.26 ip4:24.37.11.154 ip4:173.246.70.82 ip4:52.233.18.138  include:spf.protection.outlook.com include:_spf.psm.knowbe4.com ~all
                                                        

SPF

                                                            5cac69efbdb5346342b0beffffadef76
                                                        

                                                            apple-domain-verification=Ajp-BACLE_A1MRxO7GX9lFDsZ5sBWJGGaiNd3b_D_b4
                                                        

                                                            apple-domain-verification=N37XmIRC0DL4rZ5O
                                                        

                                                            atlassian-domain-verification=7q4aq4k9pnvo9/DnBWgCtJZvdd39u6Nvo5yLcruGsIFbtZ0pvaO/PkBDrj/3j22s
                                                        

                                                            facebook-domain-verification=s2yuxbjj89ab4cpf5nppdwkr13g9rw
                                                        

                                                            google-site-verification=Y4JMRV64rxwPVEdbbEJ1Lgr-v0XEGeOVXKxkYtP2ams
                                                        

                                                            google-site-verification=rTIGrfvqpn85XpNl2RxjbGg32FzPUzk1MK1zyfVQoXA
                                                        

                                                            klaviyo-site-verification=X4iFWM
                                                        

                                                            shopify-verification-code=bIqAWs4fjkUFTq5nax8H1ZyPfSdpvM
                                                        

HTTP Headers

Key server response headers for security analysis.

Security (5)

Clickjacking Protection

Content Security Policy

HSTS

XSS Filter

MIME Sniffing Protection

Web Server

                                            cloudflare
                                        

CDN Cache

                                            DYNAMIC
                                        

Cloudflare Ray ID

                                            9aa6ff07cd2fd62e-CDG
                                        

{
    "link": "<https:\/\/cdn.shopify.com>; rel=\"preconnect\", <https:\/\/cdn.shopify.com>; rel=\"preconnect\"; crossorigin, <\/\/davidstea.com\/cdn\/shop\/files\/EN_-_WEB_335_-_DESKTOP_IMAGE.jpg?v=1761332904&width=3840>; as=\"image\"; rel=\"preload\"; imagesrcset=\"\/\/davidstea.com\/cdn\/shop\/files\/EN_-_WEB_335_-_DESKTOP_IMAGE.jpg?v=1761332904&width=352 352w, \/\/davidstea.com\/cdn\/shop\/files\/EN_-_WEB_335_-_DESKTOP_IMAGE.jpg?v=1761332904&width=832 832w, \/\/davidstea.com\/cdn\/shop\/files\/EN_-_WEB_335_-_DESKTOP_IMAGE.jpg?v=1761332904&width=1200 1200w, \/\/davidstea.com\/cdn\/shop\/files\/EN_-_WEB_335_-_DESKTOP_IMAGE.jpg?v=1761332904&width=1920 1920w, \/\/davidstea.com\/cdn\/shop\/files\/EN_-_WEB_335_-_DESKTOP_IMAGE.jpg?v=1761332904&width=3840 3840w\", <\/\/davidstea.com\/cdn\/shop\/files\/EN_-_WEB_335_-_mobile_IMAGE.jpg?v=1761332927&width=3840>; as=\"image\"; rel=\"preload\"; imagesrcset=\"\/\/davidstea.com\/cdn\/shop\/files\/EN_-_WEB_335_-_mobile_IMAGE.jpg?v=1761332927&width=352 352w, \/\/davidstea.com\/cdn\/shop\/files\/EN_-_WEB_335_-_mobile_IMAGE.jpg?v=1761332927&width=832 832w, \/\/davidstea.com\/cdn\/shop\/files\/EN_-_WEB_335_-_mobile_IMAGE.jpg?v=1761332927&width=1200 1200w, \/\/davidstea.com\/cdn\/shop\/files\/EN_-_WEB_335_-_mobile_IMAGE.jpg?v=1761332927&width=1920 1920w, \/\/davidstea.com\/cdn\/shop\/files\/EN_-_WEB_335_-_mobile_IMAGE.jpg?v=1761332927&width=3840 3840w\", <\/\/davidstea.com\/cdn\/shop\/files\/DavidsTea_Logo326EN_1.svg?height=160&v=1724339600>; as=\"image\"; rel=\"preload\"; imagesrcset=\"\/\/davidstea.com\/cdn\/shop\/files\/DavidsTea_Logo326EN_1.svg?height=62&v=1724339600 352w, \/\/davidstea.com\/cdn\/shop\/files\/DavidsTea_Logo326EN_1.svg?height=148&v=1724339600 832w\"",
    "date": "Sun, 07 Dec 2025 21:08:04 GMT",
    "content-type": "text\/html; charset=utf-8",
    "content-encoding": "gzip",
    "x-sorting-hat-podid": "239",
    "x-sorting-hat-shopid": "68737859824",
    "x-storefront-renderer-rendered": "1",
    "etag": "W\/\"cacheable:4bab48b90baf904284b74d235e2243f4\"",
    "speculation-rules": "\"\/cdn\/shopifycloud\/storefront\/assets\/storefront\/storefronts.specrules-dd5621a1.json\"",
    "set-cookie": "_shopify_essential=:AZr6pKExAAEAyrKkEaekgtRrxv70D5mUyaZYymVOzQoXaOw4rKBdcl8ujB1--opH6e5mLObgsprmasG0hzHtx6VnWMptOp06Si3jUG3QWkHmtQlPOfmrrR3fAoBQ--qLANDxVHQpulmbMMPjDNFuMERhuK7RfTfitNM1fPjdNAhSxTTxf6dDV5L83qyKg-IzsN_T9pbpNdfDcN6x2Qj_rA7m0FshppbbU-HlY_1HTleiu890HCHYh_gGkri4Q049RkHZsgKsZJPVpnn4LI66CVqD1-Rxfc4qPnmg2j7vGETqqR2IyYFzAVNo:; Max-Age=31536000; Path=\/; HttpOnly; Secure; Priority=High; SameSite=Lax",
    "shopify-complexity-score": "420",
    "x-frame-options": "DENY",
    "content-security-policy": "block-all-mixed-content; frame-ancestors 'none'; upgrade-insecure-requests;",
    "strict-transport-security": "max-age=7889238",
    "x-shopid": "68737859824",
    "x-shardid": "239",
    "vary": "accept-encoding",
    "alt-svc": "h3=\":443\"; ma=86400",
    "content-language": "en-CA",
    "powered-by": "Shopify",
    "server-timing": "cfRequestDuration;dur=107.000113, earlyhints",
    "x-dc": "gcp-europe-west1,gcp-europe-west1,gcp-europe-west1",
    "x-request-id": "a6e848be-ad32-41b7-a1ca-aa5e85d5a8a3-1765141684",
    "cf-cache-status": "DYNAMIC",
    "report-to": "{\"endpoints\":[{\"url\":\"https:\\\/\\\/a.nel.cloudflare.com\\\/report\\\/v4?s=O%2Ba1xozmugRri%2F6oHnMsbv%2FGaeLu0w4bJkU6vCs4CyNi2EpfcWEqlSXAZmtfefGZHsbJB7miW6PM%2Fy2I7UGOz%2BDNX70KP4H0rivj%2FXiykvdKpHGYx98%2Ba3gnVOlXCpw%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}",
    "nel": "{\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}",
    "x-xss-protection": "1; mode=block",
    "x-content-type-options": "nosniff",
    "x-permitted-cross-domain-policies": "none",
    "x-download-options": "noopen",
    "server": "cloudflare",
    "cf-ray": "9aa6ff07cd2fd62e-CDG"
}

IP Geolocation

Server location and network information

Canada

Ottawa

IP Address

23.227.38.65

ISP / Hosting

Cloudflare, Inc.

Coordinates

45.4153, -75.6894

Country Code

CA

View on Google Maps

Email Configuration

Email security and authentication records (SPF, DKIM, DMARC).

SPF Record

v=spf1 mx ip4:209.53.109.51 ip4:173.243.195.66 ip4:173.246.7...

DKIM

Configured

DMARC

v=DMARC1; p=reject; pct=100; rua=mailto:[email protected]...

Performance Metrics

Website loading speed and performance analysis

85

Average

Load Time

0.12s

Excellent

Page Size

1.02MB

Acceptable

Requests

157

Many

Overall

85/100

Performance score

Good performance, but there's room for optimization to improve loading speed.

Blacklist Check

Checking if this domain is listed on major security blacklists.

Google Safe Browsing

Safe

Discovered Subdomains

Publicly accessible subdomains associated with this domain.

www.davidstea.com

mail.davidstea.com

blog.davidstea.com

staging.davidstea.com

images.davidstea.com

help.davidstea.com

Privacy & Trackers

2 Trackers Found

Privacy Policy

Google Analytics

General

Google Tag Manager

General

These trackers may be used for analytics, advertising, or site functionality.

Website Screenshot

In-Depth Analysis

Overview

davidstea.com is an e-commerce website specializing in the sale of loose leaf teas and related accessories. The site offers a wide variety of tea blends, catering to both traditional tea enthusiasts and those seeking more exotic infusions.

Security Assessment

davidstea.com exhibits a strong security posture. The website utilizes a valid SSL certificate issued by Google Trust Services, ensuring encrypted communication and protecting user data during transmission. The domain has been active for over 17 years, indicating stability and legitimacy. A key positive signal is its clean status on Google Safe Browsing, confirming the absence of detected threats. The website is hosted behind Cloudflare, providing additional security against DDoS attacks and other web-based threats.

Trust Level

With a FlareScore of 92/100, davidstea.com presents a low-risk profile. The high score reflects the website's strong security measures, established domain age, and clean reputation. While no website is entirely risk-free, the available data suggests a safe browsing experience.

Recommendations

While davidstea.com appears secure, users should still practice good online safety habits:

Use strong, unique passwords for your davidstea.com account.
Be cautious of phishing attempts and verify the sender's authenticity before clicking any links.
**Review the website'

User Reviews and Complaints

Share your experience with this site or ask questions. Your comments help the community.

Sign in to Share Your Experience

Join our community to leave reviews and help others make informed decisions.

Sign In Create Account

No reviews yet.

Analysis for

davidstea.com

FlareAI™ Summary