Score Breakdown

How we calculated the Flare Score based on positive and negative signals.

Positive Signals

Valid SSL certificate from trusted issuer

Established domain (2+ years old)

Not found on any blacklist (1 sources checked)

Strong email security (SPF, DKIM, DMARC)

Has privacy policy and cookie compliance

Fast loading times

Active social media presence

Negative Signals

Pro Tip: A valid SSL certificate is a basic requirement for any trustworthy site, but it doesn't guarantee the site is not a scam.

SSL & Security

SSL certificate and security headers configuration

Security Score

60/100

✓ Valid SSL (40) ✗ HSTS (20) ✗ CSP (20) ✓ X-Frame (20)

SSL Certificate

Issuer

Google Trust Services

Valid From

Oct 03, 2025

Valid Until

Jan 01, 2026

31 days remaining

Security Headers

X-Frame-Options

Domain & WHOIS Information

Domain Age

22 years 7 months

Registered Apr 14, 2003

Very High Trust

Apr 2003 Expires Apr 2026

Established domain (5+ years) - High trust indicator

Registrar

GoDaddy.com

Registration Date

Apr 14, 2003 (22 years ago)

Last Updated

Aug 05, 2025

Expiration Date

Apr 14, 2026 (0 days remaining)

Server Location

Canada

Abuse Contact

N/A

   Domain Name: PLAYLEARN.COM
   Registry Domain ID: 96808315_DOMAIN_COM-VRSN
   Registrar WHOIS Server: whois.godaddy.com
   Registrar URL: http://www.godaddy.com
   Updated Date: 2025-08-05T08:34:33Z
   Creation Date: 2003-04-14T18:20:18Z
   Registry Expiry Date: 2026-04-14T18:20:18Z
   Registrar: GoDaddy.com, LLC
   Registrar IANA ID: 146
   Registrar Abuse Contact Email: [email protected]
   Registrar Abuse Contact Phone: 480-624-2505
   Domain Status: clientDeleteProhibited https://icann.org/epp#clientDeleteProhibited
   Domain Status: clientRenewProhibited https://icann.org/epp#clientRenewProhibited
   Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
   Domain Status: clientUpdateProhibited https://icann.org/epp#clientUpdateProhibited
   Name Server: DESIREE.NS.CLOUDFLARE.COM
   Name Server: KAREEM.NS.CLOUDFLARE.COM
   DNSSEC: unsigned
   URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/
>>> Last update of whois database: 2025-11-14T23:28:29Z <<<

For more information on Whois status codes, please visit https://icann.org/epp

NOTICE: The expiration date displayed in this record is the date the
registrar's sponsorship of the domain name registration in the registry is
currently set to expire. This date does not necessarily reflect the expiration
date of the domain name registrant's agreement with the sponsoring
registrar.  Users may consult the sponsoring registrar's Whois database to
view the registrar's reported date of expiration for this registration.

TERMS OF USE: You are not authorized to access or query our Whois
database through the use of electronic processes that are high-volume and
automated except as reasonably necessary to register domain names or
modify existing registrations; the Data in VeriSign Global Registry
Services' ("VeriSign") Whois database is provided by VeriSign for
information purposes only, and to assist persons in obtaining information
about or related to a domain name registration record. VeriSign does not
guarantee its accuracy. By submitting a Whois query, you agree to abide
by the following terms of use: You agree that you may use this Data only
for lawful purposes and that under no circumstances will you use this Data
to: (1) allow, enable, or otherwise support the transmission of mass
unsolicited, commercial advertising or solicitations via e-mail, telephone,
or facsimile; or (2) enable high volume, automated, electronic processes
that apply to VeriSign (or its computer systems). The compilation,
repackaging, dissemination or other use of this Data is expressly
prohibited without the prior written consent of VeriSign. You agree not to
use electronic processes that are automated and high-volume to access or
query the Whois database except as reasonably necessary to register
domain names or modify existing registrations. VeriSign reserves the right
to restrict your access to the Whois database in its sole discretion to ensure
operational stability.  VeriSign may restrict or terminate your access to the
Whois database for failure to abide by these terms of use. VeriSign
reserves the right to modify these terms at any time.

The Registry database contains ONLY .COM, .NET, .EDU domains and
Registrars.

DNS Configuration

Domain Name System records and email security configuration

Email Security

SPF

DKIM

DMARC

Basic

2

A

3

AAAA

1

MX

7

TXT

2

NS

                                                            google-site-verification=V-GtCO-sX9eMV2DRMp2iO6VPn43U1bWRzeKNbf48EJc
                                                        

                                                            google-site-verification=WnC6n3YJlyaMVt-a9QdrmijGw97MZBAseUjnnaKJC6w
                                                        

                                                            google-site-verification=i_sjkSEGjrT86mnBHzq-vaPzJhdxYFSlaf1mIXRFSpk
                                                        

                                                            klaviyo-site-verification=KuxeuP
                                                        

                                                            v=spf1 include:spf.protection.outlook.com include:mailgun.org include:spf.smtp.mailtrap.live ip4:209.126.30.130 -all
                                                        

SPF

                                                            MS=ms24099067
                                                        

                                                            google-site-verification=Il1KlPOOYGlEtnA33vIp3E9P380Iox0hUTi873kChec
                                                        

HTTP Headers

Key server response headers for security analysis.

Security (3)

MIME Sniffing Protection

XSS Filter

Clickjacking Protection

Web Server

                                            cloudflare
                                        

Cache Policy

                                            max-age=0, must-reva...
                                        

CDN Cache

                                            DYNAMIC
                                        

Cloudflare Ray ID

                                            99ea49543e1b9952-CDG
                                        

{
    "date": "Fri, 14 Nov 2025 23:28:39 GMT",
    "content-type": "text\/html; charset=UTF-8",
    "location": "https:\/\/www.playlearn.com\/",
    "server": "cloudflare",
    "access-control-expose-headers": "Authorization",
    "pragma": "no-cache",
    "cache-control": "max-age=0, must-revalidate, no-cache, no-store",
    "expires": "Thu, 14 Nov 2024 17:51:54 GMT",
    "content-security-policy-report-only": "font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com data: *.nxedge.io *.stape.io *.fontawesome.com https:\/\/fonts.bunny.net *.buywithprime.amazon.com *.aws.dev data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.certcapture.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https:\/\/www.google.com\/recaptcha\/ *.braintreegateway.com *.paypal.com google.com *.google.com https:\/\/static.addtoany.com\/ *.instagram.com www.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.certcapture.com magento-cloudflare.jetrails.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.googletagmanager.com *.stape.io c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com *.cdninstagram.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com *.certcapture.com *.nxedge.io *.facebook.com amazon-omni-cdn.com maps.gstatic.com *.ytimg.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ magefan.com cm.magefan.com *.disqus.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.doubleclick.net *.googletagmanager.com *.stape.io https:\/\/firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com xsellco-blobstore.s3.amazonaws.com *.edesk.com *.ads.linkedin.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https:\/\/www.gstatic.com\/recaptcha\/ https:\/\/www.google.com\/recaptcha\/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com https:\/\/static.addtoany.com\/ *.googleapis.com *.gstatic.com *.instagram.com www.google.com\/recaptcha\/ www.gstatic.com\/recaptcha\/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.certcapture.com *.playlearn.com *.nxedge.io *.hotjar.com app.termly.io connect.facebook.net *.dwin1.com *.licdn.com *.accept.blue *.xsellco.com *.disqus.com https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.googletagmanager.com *.doubleclick.net *.stape.io *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.buywithprime.amazon.com *.aws.dev 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.certcapture.com *.nxedge.io https:\/\/static.klaviyo.com *.googleapis.com *.googletagmanager.com *.stape.io *.fontawesome.com https:\/\/fonts.bunny.net assets.braintreegateway.com *.aws.dev *.xsellco.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com https:\/\/stats.addtoany.com\/menu *.googleapis.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.certcapture.com *.playlearn.com *.nxedge.io app.termly.io https:\/\/static.klaviyo.com https:\/\/static-forms.klaviyo.com https:\/\/fast.a.klaviyo.com https:\/\/static-tracking.klaviyo.com\/ https:\/\/a.klaviyo.com\/ https:\/\/telemetrics.klaviyo.com\/ *.google-analytics.com *.doubleclick.net *.googlesyndication.com *.stape.io https:\/\/get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com *.buywithprime.amazon.com *.xsellco.com *.ads.linkedin.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';",
    "x-content-type-options": "nosniff",
    "x-xss-protection": "1; mode=block",
    "x-frame-options": "SAMEORIGIN",
    "access-control-allow-origin": "https:\/\/www.playlearn.com",
    "access-control-allow-credentials": "true",
    "access-control-allow-methods": "GET, POST, PUT, DELETE, HEAD, OPTIONS, PATCH",
    "access-control-allow-headers": "Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With,Range",
    "nel": "{\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}",
    "age": "1880",
    "cf-cache-status": "DYNAMIC",
    "vary": "Accept-Encoding",
    "report-to": "{\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6MKrpErIiLxPFhf%2B6UbsGgzg8g4wb6gpxy%2BdqibsoVfIZ5P%2BMxf5zArvhIuYtN1BHDKeeO6SDlJX%2BKGQWtW8EvB4zrDHU5FbTnT60Muqqtbg\"}]}",
    "cf-ray": "99ea49543e1b9952-CDG",
    "alt-svc": "h3=\":443\"; ma=86400",
    "content-encoding": "gzip",
    "set-cookie": "PHPSESSID=b8ov7un5l1eq2ni6bai13rc45s; HttpOnly; SameSite=Lax; Secure; Path=\/; Domain=www.playlearn.com; Max-Age=3600; Expires=Sat, 15 Nov 2025 00:28:39 GMT"
}

IP Geolocation

Server location and network information

Canada

Toronto

IP Address

188.114.96.0

ISP / Hosting

Cloudflare, Inc.

Coordinates

43.6532, -79.3832

Country Code

CA

View on Google Maps

Email Configuration

Email security and authentication records (SPF, DKIM, DMARC).

SPF Record

v=spf1 include:spf.protection.outlook.com include:mailgun.or...

DKIM

Configured

DMARC

v=DMARC1; p=quarantine; rua=mailto:[email protected]...

Performance Metrics

Website loading speed and performance analysis

85

Average

Load Time

0.73s

Excellent

Page Size

0.24MB

Optimized

Requests

135

Many

Overall

85/100

Performance score

Good performance, but there's room for optimization to improve loading speed.

Blacklist Check

Checking if this domain is listed on major security blacklists.

Google Safe Browsing

Safe

Discovered Subdomains

Publicly accessible subdomains associated with this domain.

www.playlearn.com

Privacy & Trackers

3 Trackers Found

Privacy Policy

Google Tag Manager

General

Facebook Pixel

General

Hotjar

General

These trackers may be used for analytics, advertising, or site functionality.

Website Screenshot

In-Depth Analysis

Overview

Playlearn.com specializes in sensory toys, furniture, and educational products designed for both children and adults, particularly those with special needs. They focus on sourcing and distributing high-quality items across Europe and the USA. The site offers account logins and facilitates online payments.

Security Assessment

Playlearn.com demonstrates a strong security posture. The site uses a valid SSL certificate issued by Google Trust Services, ensuring encrypted communication and protecting user data during transmission. The domain has a substantial age of over 22 years, indicating stability and trustworthiness. Critically, Google Safe Browsing reports a clean status, confirming no detected threats.

Trust Level

With a FlareScore of 92/100, Playlearn.com is considered a safe website. This high score is supported by the valid SSL certificate, the domain's long history, and the absence of any security warnings from Google Safe Browsing.

Recommendations

While Playlearn.com appears safe, users should still practice standard online safety measures.

Always use strong, unique passwords for your Playlearn.com account.
Review the privacy policy to understand how your data is collected and used.
Be cautious of phishing attempts and verify the legitimacy of any emails or communications claiming to be from Playlearn.com.

User Reviews and Complaints

Share your experience with this site or ask questions. Your comments help the community.

Sign in to Share Your Experience

Join our community to leave reviews and help others make informed decisions.

Sign In Create Account

No reviews yet.

Analysis for

playlearn.com

FlareAI™ Summary

Score Breakdown

Positive Signals

Negative Signals

SSL & Security

SSL Certificate

Security Headers

Domain & WHOIS Information

DNS Configuration

HTTP Headers

IP Geolocation

Email Configuration

Performance Metrics

Blacklist Check

Discovered Subdomains

Privacy & Trackers

Website Screenshot

In-Depth Analysis

User Reviews and Complaints