Score Breakdown

How we calculated the Flare Score based on positive and negative signals.

Positive Signals

Valid SSL certificate from Google Trust Services

Established domain (12+ years old)

WHOIS information publicly available

Registered with reputable registrar (GoDaddy.com, LLC)

Strong email security (SPF, DKIM, DMARC configured)

Privacy policy present

Good website performance

Active social media presence

Uses CDN for better performance and security

Negative Signals

Pro Tip: A valid SSL certificate is a basic requirement for any trustworthy site, but it doesn't guarantee the site is not a scam.

SSL & Security

SSL certificate and security headers configuration

Security Score

80/100

✓ Valid SSL (40) ✓ HSTS (20) ✗ CSP (20) ✓ X-Frame (20)

SSL Certificate

Issuer

Google Trust Services

Valid From

Jan 07, 2026

Valid Until

Apr 07, 2026

77 days remaining

Security Headers

HSTS

X-Frame-Options

Domain & WHOIS Information

Domain Age

12 years 6 months

Registered Jul 26, 2013

Very High Trust

Jul 2013 Expires Jul 2029

Established domain (5+ years) - High trust indicator

Registrar

GoDaddy.com

Registration Date

Jul 26, 2013 (12 years ago)

Last Updated

Nov 20, 2025

Expiration Date

Jul 26, 2029 (1283 days remaining)

Server Location

Canada

Abuse Contact

[email protected]

480-624-2505

   Domain Name: ONLINEHOMESHOP.COM
   Registry Domain ID: 1817780891_DOMAIN_COM-VRSN
   Registrar WHOIS Server: whois.godaddy.com
   Registrar URL: http://www.godaddy.com
   Updated Date: 2025-11-20T03:01:48Z
   Creation Date: 2013-07-26T18:13:25Z
   Registry Expiry Date: 2029-07-26T18:13:25Z
   Registrar: GoDaddy.com, LLC
   Registrar IANA ID: 146
   Registrar Abuse Contact Email: [email protected]
   Registrar Abuse Contact Phone: 480-624-2505
   Domain Status: clientDeleteProhibited https://icann.org/epp#clientDeleteProhibited
   Domain Status: clientRenewProhibited https://icann.org/epp#clientRenewProhibited
   Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
   Domain Status: clientUpdateProhibited https://icann.org/epp#clientUpdateProhibited
   Name Server: COEN.NS.CLOUDFLARE.COM
   Name Server: LIGIA.NS.CLOUDFLARE.COM
   DNSSEC: unsigned
   URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/
>>> Last update of whois database: 2026-01-18T14:34:54Z <<<

For more information on Whois status codes, please visit https://icann.org/epp

NOTICE: The expiration date displayed in this record is the date the
registrar's sponsorship of the domain name registration in the registry is
currently set to expire. This date does not necessarily reflect the expiration
date of the domain name registrant's agreement with the sponsoring
registrar.  Users may consult the sponsoring registrar's Whois database to
view the registrar's reported date of expiration for this registration.

TERMS OF USE: You are not authorized to access or query our Whois
database through the use of electronic processes that are high-volume and
automated except as reasonably necessary to register domain names or
modify existing registrations; the Data in VeriSign Global Registry
Services' ("VeriSign") Whois database is provided by VeriSign for
information purposes only, and to assist persons in obtaining information
about or related to a domain name registration record. VeriSign does not
guarantee its accuracy. By submitting a Whois query, you agree to abide
by the following terms of use: You agree that you may use this Data only
for lawful purposes and that under no circumstances will you use this Data
to: (1) allow, enable, or otherwise support the transmission of mass
unsolicited, commercial advertising or solicitations via e-mail, telephone,
or facsimile; or (2) enable high volume, automated, electronic processes
that apply to VeriSign (or its computer systems). The compilation,
repackaging, dissemination or other use of this Data is expressly
prohibited without the prior written consent of VeriSign. You agree not to
use electronic processes that are automated and high-volume to access or
query the Whois database except as reasonably necessary to register
domain names or modify existing registrations. VeriSign reserves the right
to restrict your access to the Whois database in its sole discretion to ensure
operational stability.  VeriSign may restrict or terminate your access to the
Whois database for failure to abide by these terms of use. VeriSign
reserves the right to modify these terms at any time.

The Registry database contains ONLY .COM, .NET, .EDU domains and
Registrars.

DNS Configuration

Domain Name System records and email security configuration

Email Security

SPF

DKIM

DMARC

Basic

3

A

3

AAAA

1

MX

4

TXT

2

NS

                                                            klaviyo-site-verification=UWVvrv
                                                        

                                                            v=spf1 include:spf.protection.outlook.com include:spf.mandrillapp.com -all
                                                        

SPF

                                                            google-site-verification=62Uo00FNxkXR6eekh2XAtSvSaQR17g0O7G44Q5iiaxY
                                                        

                                                            google-site-verification=kwIo6Owigj-eQlSVDWOu6oOjWCA01-tVMeMcrpXulo4
                                                        

HTTP Headers

Key server response headers for security analysis.

Security (4)

MIME Sniffing Protection

XSS Filter

Clickjacking Protection

HSTS

Web Server

                                            cloudflare
                                        

Cache Policy

                                            no-store, no-cache,...
                                        

CDN Cache

                                            DYNAMIC
                                        

Cloudflare Ray ID

                                            9bfed1125ec3d155-CDG
                                        

{
    "date": "Sun, 18 Jan 2026 14:35:03 GMT",
    "content-type": "text\/html; charset=UTF-8",
    "location": "https:\/\/www.onlinehomeshop.com\/",
    "set-cookie": "AWSALBCORS=a0+kk4VRyhmp0MkJwDvOPmGNKI5IKTFvoNGGrB0pUE6sDpdGPH0gAb5nKxPdoFeNsZZCMG3BuV0DKirmMoj0dABoasq6WxgkXabPLYdov58kzFZcGPdZzeX1nomw; Expires=Sun, 25 Jan 2026 14:35:03 GMT; Path=\/; SameSite=None; Secure",
    "content-security-policy-report-only": "font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.klevu.com *.ksearchnet.com *.fontawesome.com *.stripe.com *.klarna.com *.klarnaevt.com *.klarnacdn.net klarna.com https:\/\/fonts.gstatic.com https:\/\/static.klaviyo.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.adyen.com pay.google.com payments-eu.amazon.com *.amazon.de *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es 'self' *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.facebook.com * 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com player.vimeo.com *.youtube.com https:\/\/www.google.com\/recaptcha\/ www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com *.braintreegateway.com *.paypal.com google.com *.google.com *.adyen.com pay.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.awin1.com *.zenaps.com *.fls.doubleclick.net account.fetchify.com *.google.com\/ *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com *.stripe.com * *.weltpixel.com consentcdn.cookiebot.com consentcdn.cookiebot.eu c.paypal.com checkout.paypal.com assets.braintreegateway.com *.cardinalcommerce.com challenges.cloudflare.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.adyen.com pay.google.com *.payments-amazon.com *.media-amazon.com *.paypalobjects.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de static-eu.payments-amazon.com *.awin1.com *.zenaps.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.klevu.com *.ksearchnet.com https:\/\/www.magezon.com *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.googleapis.com * imgsct.cookiebot.com imgsct.cookiebot.eu www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.pushalert.co www.xtento.com cdn.xtento.com lookaside.fbsbx.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.awin1.com www.dwin1.com *.zenaps.com https:\/\/the.sciencebehindecommerce.com chimpstatic.com downloads.mailchimp.com *.list-manage.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.klevu.com *.ksearchnet.com s7.addthis.com *.avada.io *.google.com\/ *.facebook.com https:\/\/connect.facebook.net graph.facebook.com business.facebook.com *.stripe.com https:\/\/maps.googleapis.com https:\/\/static.hotjar.com * consent.cookiebot.com consent.cookiebot.eu js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com challenges.cloudflare.com *.pushalert.co https:\/\/www.googletagmanager.com tagmanager.google.com www.xtento.com cdn.xtento.com *.loudcrowd.com https:\/\/js.klevu.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com cc-cdn.com https:\/\/static.klaviyo.com *.klevu.com *.ksearchnet.com *.fontawesome.com *.stripe.com *.klarna.com *.klarnaevt.com *.klarnacdn.net assets.braintreegateway.com tagmanager.google.com https:\/\/fonts.googleapis.com *.loudcrowd.com https:\/\/js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com lookaside.fbsbx.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.adobe.io performance.typekit.net *.sentry.io www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.adyen.com payments-eu.amazon.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de https:\/\/the.sciencebehindecommerce.com api.craftyclicks.co.uk pcls1.craftyclicks.co.uk https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.klevu.com *.ksearchnet.com ekr.zdassets.com\/ https:\/\/get.geojs.io *.avada.io *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.stripe.com https:\/\/developer.adobe.com https:\/\/maps.googleapis.com * consentcdn.cookiebot.com consentcdn.cookiebot.eu api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.pushalert.co https:\/\/www.google-analytics.com *.loudcrowd.com 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';",
    "x-content-type-options": "nosniff",
    "x-xss-protection": "1; mode=block",
    "x-frame-options": "SAMEORIGIN",
    "report-to": "{\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https:\/\/a.nel.cloudflare.com\/report\/v4?s=V128oi4JjivkTELm2A9Kgx%2F8N5RQX7MsgnklCOPT6OWArpF%2BFKIhvgyVbwwdRc%2B1L4tTSJvLs9I%2ByBnGp4J8WgBqlWVG3%2FPEjdhM%2BBamlCYBzspj9w%3D%3D\"}]}",
    "vary": "Accept-Encoding",
    "x-cache-hits": "594",
    "x-debug-currency": "none",
    "pragma": "no-cache",
    "expires": "-1",
    "cache-control": "no-store, no-cache, must-revalidate, max-age=0",
    "cf-cache-status": "DYNAMIC",
    "nel": "{\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}",
    "strict-transport-security": "max-age=0",
    "server": "cloudflare",
    "cf-ray": "9bfed1125ec3d155-CDG",
    "bal-server": "web1",
    "content-encoding": "gzip"
}

IP Geolocation

Server location and network information

Canada

Toronto

IP Address

172.67.71.58

ISP / Hosting

Cloudflare, Inc.

Coordinates

43.6532, -79.3832

Country Code

CA

View on Google Maps

Email Configuration

Email security and authentication records (SPF, DKIM, DMARC).

SPF Record

v=spf1 include:spf.protection.outlook.com include:spf.mandri...

DKIM

Configured

DMARC

v=DMARC1; p=none;

Performance Metrics

Website loading speed and performance analysis

85

Average

Load Time

0.41s

Excellent

Page Size

0.5MB

Optimized

Requests

169

Many

Overall

85/100

Performance score

Good performance, but there's room for optimization to improve loading speed.

Blacklist Check

Checking if this domain is listed on major security blacklists.

No blacklist data available yet. Website analysis may be in progress.

Discovered Subdomains

Publicly accessible subdomains associated with this domain.

www.onlinehomeshop.com

ftp.onlinehomeshop.com

staging.onlinehomeshop.com

Privacy & Trackers

2 Trackers Found

Privacy Policy

Google Analytics

General

Google Tag Manager

General

These trackers may be used for analytics, advertising, or site functionality.

Website Screenshot

In-Depth Analysis

Overview

Onlinehomeshop.com (OHS) is an e-commerce platform specializing in homeware products, including bedding, curtains, towels, throws, and rugs. The site aims to offer popular homeware brands directly to consumers.

Security Assessment

The website has a valid SSL certificate issued by Google Trust Services, expiring in 2026, ensuring encrypted communication. The domain is relatively old (12+ years), suggesting legitimacy. However, Google Safe Browsing verification is unavailable, which is a concern. OHS uses Cloudflare, a reputable CDN, for hosting, adding a layer of DDoS protection.

Trust Level

With a FlareScore of 92/100, Onlinehomeshop.com is considered relatively safe. This score likely reflects the valid SSL, domain age, and use of Cloudflare. However, the unavailable Google Safe Browsing status prevents a higher score. The presence of trackers (2) is not unusual for e-commerce sites but should be considered from a privacy perspective.

Recommendations

Despite the positive FlareScore, users should exercise caution:

Verify the website's legitimacy: Check for customer reviews and independent ratings.
Use strong, unique passwords for your account.
Review the privacy policy to understand data collection practices.
Be wary of phishing attempts and verify the website'

User Reviews and Complaints

Share your experience with this site or ask questions. Your comments help the community.

Sign in to Share Your Experience

Join our community to leave reviews and help others make informed decisions.

Sign In Create Account

No reviews yet.

Analysis for

onlinehomeshop.com

FlareAI™ Summary