Score Breakdown

How we calculated the Flare Score based on positive and negative signals.

Positive Signals

Valid SSL certificate from trusted issuer

Established domain (2+ years old)

Not found on any blacklist (1 sources checked)

Strong email security (SPF, DKIM, DMARC)

Has privacy policy and cookie compliance

Fast loading times

Active social media presence

Contact information available

Negative Signals

Pro Tip: A valid SSL certificate is a basic requirement for any trustworthy site, but it doesn't guarantee the site is not a scam.

SSL & Security

SSL certificate and security headers configuration

Security Score

100/100

✓ Valid SSL (40) ✓ HSTS (20) ✓ CSP (20) ✓ X-Frame (20)

SSL Certificate

Issuer

Let's Encrypt

Valid From

Oct 27, 2025

Valid Until

Jan 25, 2026

55 days remaining

Security Headers

HSTS

CSP

X-Frame-Options

Domain & WHOIS Information

Domain Age

7 years 8 months

Registered Mar 13, 2018

Very High Trust

Mar 2018 Expires Mar 2033

Established domain (5+ years) - High trust indicator

Registrar

GoDaddy.com

Registration Date

Mar 13, 2018 (7 years ago)

Last Updated

Sep 18, 2023

Expiration Date

Mar 13, 2033 (0 days remaining)

Server Location

United States

Abuse Contact

N/A

   Domain Name: RUNWAYML.COM
   Registry Domain ID: 2238814778_DOMAIN_COM-VRSN
   Registrar WHOIS Server: whois.godaddy.com
   Registrar URL: http://www.godaddy.com
   Updated Date: 2023-09-18T23:19:46Z
   Creation Date: 2018-03-13T22:17:01Z
   Registry Expiry Date: 2033-03-13T22:17:01Z
   Registrar: GoDaddy.com, LLC
   Registrar IANA ID: 146
   Registrar Abuse Contact Email: [email protected]
   Registrar Abuse Contact Phone: 480-624-2505
   Domain Status: clientDeleteProhibited https://icann.org/epp#clientDeleteProhibited
   Domain Status: clientRenewProhibited https://icann.org/epp#clientRenewProhibited
   Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
   Domain Status: clientUpdateProhibited https://icann.org/epp#clientUpdateProhibited
   Name Server: NS-1093.AWSDNS-08.ORG
   Name Server: NS-2001.AWSDNS-58.CO.UK
   Name Server: NS-383.AWSDNS-47.COM
   Name Server: NS-570.AWSDNS-07.NET
   DNSSEC: unsigned
   URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/
>>> Last update of whois database: 2025-11-11T20:44:52Z <<<

For more information on Whois status codes, please visit https://icann.org/epp

NOTICE: The expiration date displayed in this record is the date the
registrar's sponsorship of the domain name registration in the registry is
currently set to expire. This date does not necessarily reflect the expiration
date of the domain name registrant's agreement with the sponsoring
registrar.  Users may consult the sponsoring registrar's Whois database to
view the registrar's reported date of expiration for this registration.

TERMS OF USE: You are not authorized to access or query our Whois
database through the use of electronic processes that are high-volume and
automated except as reasonably necessary to register domain names or
modify existing registrations; the Data in VeriSign Global Registry
Services' ("VeriSign") Whois database is provided by VeriSign for
information purposes only, and to assist persons in obtaining information
about or related to a domain name registration record. VeriSign does not
guarantee its accuracy. By submitting a Whois query, you agree to abide
by the following terms of use: You agree that you may use this Data only
for lawful purposes and that under no circumstances will you use this Data
to: (1) allow, enable, or otherwise support the transmission of mass
unsolicited, commercial advertising or solicitations via e-mail, telephone,
or facsimile; or (2) enable high volume, automated, electronic processes
that apply to VeriSign (or its computer systems). The compilation,
repackaging, dissemination or other use of this Data is expressly
prohibited without the prior written consent of VeriSign. You agree not to
use electronic processes that are automated and high-volume to access or
query the Whois database except as reasonably necessary to register
domain names or modify existing registrations. VeriSign reserves the right
to restrict your access to the Whois database in its sole discretion to ensure
operational stability.  VeriSign may restrict or terminate your access to the
Whois database for failure to abide by these terms of use. VeriSign
reserves the right to modify these terms at any time.

The Registry database contains ONLY .COM, .NET, .EDU domains and
Registrars.

DNS Configuration

Domain Name System records and email security configuration

Email Security

SPF

DKIM

DMARC

Basic

1

A

5

MX

16

TXT

4

NS

1

                                                            aspmx.l.google.com
                                                        

5

                                                            alt1.aspmx.l.google.com
                                                        

5

                                                            alt2.aspmx.l.google.com
                                                        

10

                                                            alt4.aspmx.l.google.com
                                                        

10

                                                            alt3.aspmx.l.google.com
                                                        

                                                            stripe-verification=91eb267fa9be6c727952b952e3797f987fdd9185d60c62a6c55225e7a40ecf96
                                                        

                                                            stripe-verification=9DF5B799032188A24198EF989BA3E00E1C7AE1572C27176023FC87EDDBCD6581
                                                        

                                                            v=spf1 include:servers.mcsv.net include:_spf.google.com include:mail.zendesk.com -all
                                                        

SPF

9E5241CFB5

                                                            MS=ms68761608
                                                        

                                                            ZOOM_verify_71FR1fdw7dU0Wv05Jfh9A8
                                                        

                                                            apple-domain-verification=Pgaj32cU9vd6bbZk
                                                        

                                                            google-site-verification=JQFQeHrLkkGZgaB08wur85qL5kVKow-W_E_TLM1FAeY
                                                        

                                                            google-site-verification=RvYLhQ01Xe4W4TCfL9LDdn1PrUa-SEIMho8S2GXXKd4
                                                        

                                                            google-site-verification=SpmKL3v9bFVxgboTSbpDW6FXF3rCckwLau6NYWPtq80
                                                        

                                                            google-site-verification=k3cguFoTcUrq3yftkiaQ2YaSTLrLGrpsGszCI3Wu-0A
                                                        

                                                            google-site-verification=w1hkg-0mmTM2v507I0RfOiCGPh00r9NoQqcCtIwougA
                                                        

                                                            h1-domain-verification=exg8jr73JbqfCMrN7Hrpz2cu42soth75VDpuL48TCdCv7VMS
                                                        

                                                            jamf-site-verification=hIkFprokmy1iaCNqczcLfQ
                                                        

                                                            slack-domain-verification=DaXgblF7sprm6E2Xqe9ZitDrdcfQZXaNWdVQ9Bf4
                                                        

                                                            stripe-verification=0392CF05876E6A7B2E74E634A0A312AC028AF78CFD8F798AD1B4AA1D3D4F3BFC
                                                        

                                                            ns-570.awsdns-07.net
                                                        

                                                            ns-1093.awsdns-08.org
                                                        

                                                            ns-2001.awsdns-58.co.uk
                                                        

                                                            ns-383.awsdns-47.com
                                                        

HTTP Headers

Key server response headers for security analysis.

Security (6)

Content Security Policy

Referrer Policy

HSTS

MIME Sniffing Protection

Clickjacking Protection

XSS Filter

Web Server

                                            Vercel
                                        

Cache Policy

                                            public, max-age=0, m...
                                        

{
    "access-control-allow-origin": "*",
    "age": "10103",
    "cache-control": "public, max-age=0, must-revalidate",
    "content-disposition": "inline",
    "content-encoding": "gzip",
    "content-security-policy": "default-src 'self';    script-src 'self' 'unsafe-eval' 'unsafe-inline' https:\/\/vercel.live https:\/\/va.vercel-scripts.com https:\/\/platform.twitter.com https:\/\/www.googletagmanager.com https:\/\/*.googletagmanager.com https:\/\/googleads.g.doubleclick.net https:\/\/pagead2.googlesyndication.com www.googletagmanager.com https:\/\/tag.unifyintent.com https:\/\/unifyintent.com https:\/\/connect.facebook.net https:\/\/snap.licdn.com;    style-src 'self' 'unsafe-inline' https:\/\/vercel.live https:\/\/www.googletagmanager.com https:\/\/fonts.googleapis.com;    img-src 'self' d3phaj0sisr2ct.cloudfront.net blob: data: https:\/\/runway-static-assets.s3.amazonaws.com https:\/\/*.googleusercontent.com https:\/\/vercel.live https:\/\/vercel.com https:\/\/img.youtube.com https:\/\/placehold.co https:\/\/www.googletagmanager.com https:\/\/*.googletagmanager.com https:\/\/fonts.gstatic.com https:\/\/www.googleadservices.com https:\/\/pagead2.googlesyndication.com https:\/\/googleads.g.doubleclick.net https:\/\/*.google-analytics.com https:\/\/*.g.doubleclick.net https:\/\/*.google.com https:\/\/googleads.g.doubleclick.net https:\/\/www.google.com https:\/\/www.facebook.com https:\/\/px.ads.linkedin.com https:\/\/www.linkedin.com;    media-src 'self' d3phaj0sisr2ct.cloudfront.net https:\/\/runway-static-assets.s3.amazonaws.com;    font-src 'self' https:\/\/vercel.live https:\/\/assets.vercel.com https:\/\/fonts.gstatic.com;    connect-src 'self' https:\/\/rest.iad-05.braze.com https:\/\/*.airtable.com https:\/\/*.salesforce.com https:\/\/boards-api.greenhouse.io wss:\/\/ws-us3.pusher.com https:\/\/vercel.live https:\/\/*.googleapis.com https:\/\/*.firebaseio.com https:\/\/firestore.googleapis.com https:\/\/*.firebaseauth.com https:\/\/securetoken.googleapis.com  https:\/\/www.google-analytics.com https:\/\/*.google-analytics.com https:\/\/*.analytics.google.com https:\/\/www.googletagmanager.com https:\/\/*.googletagmanager.com  https:\/\/help.runwayml.com https:\/\/www.googleadservices.com https:\/\/www.google.com https:\/\/*.google.com https:\/\/*.g.doubleclick.net https:\/\/pagead2.googlesyndication.com www.google.com https:\/\/unifyintent.com https:\/\/d1iy2yzlu65818.cloudfront.net https:\/\/www.facebook.com https:\/\/px.ads.linkedin.com;    frame-src 'self' https:\/\/www.youtube.com https:\/\/youtube.com https:\/\/player.vimeo.com https:\/\/vercel.live https:\/\/platform.twitter.com https:\/\/twitter.com https:\/\/www.googletagmanager.com;    object-src 'none';    base-uri 'self';    form-action 'self';    frame-ancestors 'none';    upgrade-insecure-requests;",
    "content-type": "text\/html; charset=utf-8",
    "date": "Tue, 11 Nov 2025 20:45:07 GMT",
    "etag": "W\/\"82ae3082742608e81493f1b741120b86\"",
    "referrer-policy": "origin-when-cross-origin",
    "server": "Vercel",
    "strict-transport-security": "max-age=63072000",
    "vary": "rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch",
    "x-content-type-options": "nosniff",
    "x-frame-options": "SAMEORIGIN",
    "x-matched-path": "\/",
    "x-nextjs-prerender": "1",
    "x-nextjs-stale-time": "300",
    "x-vercel-cache": "HIT",
    "x-vercel-id": "cdg1::vfx4m-1762893907838-1d1d6e158bc2",
    "x-xss-protection": "1; mode=block"
}

IP Geolocation

Server location and network information

United States

Walnut

IP Address

76.76.21.21

ISP / Hosting

Amazon.com, Inc.

Coordinates

34.0233, -117.8512

Country Code

US

View on Google Maps

Email Configuration

Email security and authentication records (SPF, DKIM, DMARC).

SPF Record

v=spf1 include:servers.mcsv.net include:_spf.google.com incl...

DKIM

Configured

DMARC

v=DMARC1; p=quarantine; rua=mailto:[email protected]...

Performance Metrics

Website loading speed and performance analysis

85

Average

Load Time

0.18s

Excellent

Page Size

0.79MB

Optimized

Requests

102

Many

Overall

85/100

Performance score

Good performance, but there's room for optimization to improve loading speed.

Blacklist Check

Checking if this domain is listed on major security blacklists.

Google Safe Browsing

Safe

Discovered Subdomains

Publicly accessible subdomains associated with this domain.

www.runwayml.com

blog.runwayml.com

store.runwayml.com

api.runwayml.com

dev.runwayml.com

vpn.runwayml.com

assets.runwayml.com

app.runwayml.com

support.runwayml.com

help.runwayml.com

Privacy & Trackers

0 Trackers Found

Privacy Policy

Website Screenshot

In-Depth Analysis

Overview

RunwayML, accessible at runwayml.com, provides AI-powered image and video generation tools. Users can leverage features like text-to-video and image-to-video, making it a platform for creative content generation. The website indicates trust by millions of users worldwide.

Security Assessment

Runwayml.com demonstrates a strong security posture. A valid SSL certificate issued by Let's Encrypt, expiring in 2026, ensures encrypted communication. The domain has a healthy age of over seven years, indicating stability. Importantly, Google Safe Browsing reports a clean status, signaling the absence of detected threats. This is a crucial positive signal. The website is hosted in the United States via Amazon.com, Inc., a reputable ISP.

Trust Level

With a FlareScore of 94/100, runwayml.com presents a low-risk profile. The high score is supported by the valid SSL, domain age, and the absence of Google Safe Browsing warnings.

Recommendations

While runwayml.com appears safe, users should still practice caution. Review the privacy policy to understand data handling practices. Although no trackers were detected, be mindful of the information shared with the platform. As with any AI tool, critically evaluate the generated content. Overall, runwayml.com appears to be a trustworthy platform for AI-based image and video generation.

User Reviews and Complaints

Share your experience with this site or ask questions. Your comments help the community.

Sign in to Share Your Experience

Join our community to leave reviews and help others make informed decisions.

Sign In Create Account

No reviews yet.

Analysis for

runwayml.com

FlareAI™ Summary