Score Breakdown

How we calculated the Flare Score based on positive and negative signals.

Positive Signals

Valid SSL certificate from Let's Encrypt

Established domain (7+ years old)

WHOIS information publicly available

Not found on any blacklist (1 sources checked)

Privacy policy present

Good website performance

Contact information available

Negative Signals

Missing important security headers

Pro Tip: A valid SSL certificate is a basic requirement for any trustworthy site, but it doesn't guarantee the site is not a scam.

SSL & Security

SSL certificate and security headers configuration

Security Score

60/100

✓ Valid SSL (40) ✗ HSTS (20) ✗ CSP (20) ✓ X-Frame (20)

SSL Certificate

Issuer

Let's Encrypt

Valid From

Jan 13, 2026

Valid Until

Apr 13, 2026

39 days remaining

Security Headers

X-Frame-Options

How Was This Calculated?

Transparency into our FlareScore™ methodology and data sources used for this analysis.

nikkoscissors.com Analysis

FlareScore™: 91/100 (Safe Risk)

Our analysis of nikkoscissors.com identified 7 positive security indicators and 1 potential concerns. The FlareScore™ rating combines technical security measures, domain reputation, and content analysis.

SSL Certificate Analysis

Domain Age: 7 years 3 months

AI Content Review

6 DNS Records

Analysis Sources

• WHOIS: PDR Ltd. d/b/a PublicDomainRegistry.com
• SSL: Let's Encrypt
• DNS: 6 records analyzed
• Content: Visual & text analysis

Last Checked

Jan 27, 2026
1 month ago

Transparency Note: Our analysis is based on publicly available data and automated scanning. For detailed methodology and accuracy metrics, visit our methodology page.

Domain & WHOIS Information

Domain Age

7 years 3 months

Registered Nov 08, 2018

Very High Trust

Nov 2018 Expires Nov 2026

Established domain (5+ years) - High trust indicator

Registrar

PDR Ltd. d/b/a PublicDomainRegistry.com

Registration Date

Nov 08, 2018 (7 years ago)

Last Updated

Jan 14, 2026

Expiration Date

Nov 08, 2026 (249 days remaining)

Server Location

Finland

Abuse Contact

[email protected]

+1.2013775952

   Domain Name: NIKKOSCISSORS.COM
   Registry Domain ID: 2330621583_DOMAIN_COM-VRSN
   Registrar WHOIS Server: whois.PublicDomainRegistry.com
   Registrar URL: http://www.publicdomainregistry.com
   Updated Date: 2026-01-14T09:25:51Z
   Creation Date: 2018-11-08T15:14:51Z
   Registry Expiry Date: 2026-11-08T15:14:51Z
   Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
   Registrar IANA ID: 303
   Registrar Abuse Contact Email: [email protected]
   Registrar Abuse Contact Phone: +1.2013775952
   Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
   Name Server: IVY.NS.CLOUDFLARE.COM
   Name Server: SCOTT.NS.CLOUDFLARE.COM
   DNSSEC: unsigned
   URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/
>>> Last update of whois database: 2026-01-27T18:28:49Z <<<

For more information on Whois status codes, please visit https://icann.org/epp

NOTICE: The expiration date displayed in this record is the date the
registrar's sponsorship of the domain name registration in the registry is
currently set to expire. This date does not necessarily reflect the expiration
date of the domain name registrant's agreement with the sponsoring
registrar.  Users may consult the sponsoring registrar's Whois database to
view the registrar's reported date of expiration for this registration.

TERMS OF USE: You are not authorized to access or query our Whois
database through the use of electronic processes that are high-volume and
automated except as reasonably necessary to register domain names or
modify existing registrations; the Data in VeriSign Global Registry
Services' ("VeriSign") Whois database is provided by VeriSign for
information purposes only, and to assist persons in obtaining information
about or related to a domain name registration record. VeriSign does not
guarantee its accuracy. By submitting a Whois query, you agree to abide
by the following terms of use: You agree that you may use this Data only
for lawful purposes and that under no circumstances will you use this Data
to: (1) allow, enable, or otherwise support the transmission of mass
unsolicited, commercial advertising or solicitations via e-mail, telephone,
or facsimile; or (2) enable high volume, automated, electronic processes
that apply to VeriSign (or its computer systems). The compilation,
repackaging, dissemination or other use of this Data is expressly
prohibited without the prior written consent of VeriSign. You agree not to
use electronic processes that are automated and high-volume to access or
query the Whois database except as reasonably necessary to register
domain names or modify existing registrations. VeriSign reserves the right
to restrict your access to the Whois database in its sole discretion to ensure
operational stability.  VeriSign may restrict or terminate your access to the
Whois database for failure to abide by these terms of use. VeriSign
reserves the right to modify these terms at any time.

The Registry database contains ONLY .COM, .NET, .EDU domains and
Registrars.

DNS Configuration

Domain Name System records and email security configuration

Email Security

SPF

DKIM

DMARC

Basic

1

A

1

MX

1

TXT

2

NS

HTTP Headers

Key server response headers for security analysis.

Security (3)

MIME Sniffing Protection

XSS Filter

Clickjacking Protection

Web Server

                                            Apache
                                        

Technology

                                            PHP/8.3.29
                                        

Cache Policy

                                            max-age=0, must-reva...
                                        

{
    "Date": "Tue, 27 Jan 2026 18:29:03 GMT",
    "Server": "Apache",
    "X-Powered-By": "PHP\/8.3.29",
    "X-DNS-Prefetch-Control": "on",
    "Pragma": "no-cache",
    "Cache-Control": "max-age=0, must-revalidate, no-cache, no-store",
    "Expires": "Mon, 27 Jan 2025 18:29:04 GMT",
    "Content-Security-Policy-Report-Only": "font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.klarnacdn.net *.fontawesome.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnaevt.com *.link.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com *.klarna.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com www.facebook.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.klarna.com *.klarnaevt.com *.klarnacdn.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com maps.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com s7.addthis.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarnaevt.com *.link.com maps.googleapis.com cdn.ampproject.org www.gstatic.com connect.facebook.net https:\/\/www.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.klarnacdn.net *.fontawesome.com assets.braintreegateway.com *.stripe.network *.stripecdn.com www.gstatic.com maxcdn.bootstrapcdn.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com ekr.zdassets.com\/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com *.stripe.com klarna.com *.link.com cdn.ampproject.org www.googleapis.com https:\/\/www.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';",
    "X-Content-Type-Options": "nosniff",
    "X-XSS-Protection": "1; mode=block",
    "X-Frame-Options": "SAMEORIGIN",
    "Vary": "Accept-Encoding,User-Agent",
    "Content-Encoding": "gzip",
    "X-UA-Compatible": "IE=edge",
    "Transfer-Encoding": "chunked",
    "Content-Type": "text\/html; charset=UTF-8"
}

IP Geolocation

Server location and network information

Finland

Helsinki

IP Address

65.109.175.126

ISP / Hosting

Hetzner Online GmbH

Coordinates

60.1719, 24.9347

Country Code

FI

View on Google Maps

Email Configuration

Email security and authentication records (SPF, DKIM, DMARC).

SPF Record

v=spf1 ip4:188.40.167.108 ip4:167.235.26.195 include:vrns.ne...

DKIM

Configured

Performance Metrics

Website loading speed and performance analysis

85

Average

Load Time

0.99s

Excellent

Page Size

0.4MB

Optimized

Requests

109

Many

Overall

85/100

Performance score

Good performance, but there's room for optimization to improve loading speed.

Blacklist Check

Checking if this domain is listed on major security blacklists.

Google Safe Browsing

Safe

Discovered Subdomains

Publicly accessible subdomains associated with this domain.

www.nikkoscissors.com

mail.nikkoscissors.com

Privacy & Trackers

0 Trackers Found

Privacy Policy

Website Screenshot

In-Depth Analysis

Overview

Nikkoscissors.com is an e-commerce website specializing in professional hairdressing scissors for hairstylists and salons in the UK. The site offers a range of shears and cutting tools. It includes login functionality and supports online payments.

Security Assessment

The website utilizes a valid SSL certificate issued by Let's Encrypt, ensuring encrypted communication between the user's browser and the server. The certificate is valid until April 2026. The domain is relatively mature, being over seven years old, which is a positive indicator. Google Safe Browsing reports a clean status, indicating no detected threats. The site is hosted in Finland by Hetzner Online GmbH.

Trust Level

With a FlareScore of 91/100, Nikkoscissors.com presents a low risk to users. This high score is attributed to the valid SSL certificate, the domain's age, and the absence of any detected threats by Google Safe Browsing. The presence of a privacy policy further enhances user trust.

Recommendations

While Nikkoscissors.com appears safe, users should still practice caution. Always use strong, unique passwords for your account. Review the website's privacy policy to understand how your data is handled. As with any online transaction, exercise vigilance when entering payment information. Verify the order details before submitting your purchase.

User Reviews and Complaints

Share your experience with this site or ask questions. Your comments help the community.

Sign in to Share Your Experience

Join our community to leave reviews and help others make informed decisions.

Sign In Create Account

No reviews yet.

Analysis for

nikkoscissors.com

FlareAI™ Summary