Score Breakdown

How we calculated the Flare Score based on positive and negative signals.

Positive Signals

Valid SSL certificate from DigiCert Inc

Established domain (30+ years old)

WHOIS information publicly available

Not found on any blacklist (1 sources checked)

Modern security headers configured (HSTS, CSP)

Good website performance

Built with Shopify (established platform)

Negative Signals

Pro Tip: A valid SSL certificate is a basic requirement for any trustworthy site, but it doesn't guarantee the site is not a scam.

SSL & Security

SSL certificate and security headers configuration

Security Score

80/100

⚠ SSL Expired (20) ✓ HSTS (20) ✓ CSP (20) ✓ X-Frame (20)

SSL Certificate

Issuer

DigiCert Inc

Valid From

Nov 23, 2025

Valid Until

Feb 21, 2026

Certificate Expired

Security Headers

HSTS

CSP

X-Frame-Options

How Was This Calculated?

Transparency into our FlareScore™ methodology and data sources used for this analysis.

threads.com Analysis

FlareScore™: 78/100 (Safe Risk)

Our analysis of threads.com identified 7 positive security indicators and 0 potential concerns. The FlareScore™ rating combines technical security measures, domain reputation, and content analysis.

SSL Certificate Analysis

Domain Age: 30 years 10 months

AI Content Review

12 DNS Records

Analysis Sources

• WHOIS: RegistrarSEC LLC
• SSL: DigiCert Inc
• DNS: 12 records analyzed
• Content: Visual & text analysis

Last Checked

Feb 13, 2026
2 weeks ago

Transparency Note: Our analysis is based on publicly available data and automated scanning. For detailed methodology and accuracy metrics, visit our methodology page.

Domain & WHOIS Information

Domain Age

30 years 10 months

Registered May 05, 1995

Very High Trust

May 1995 Expires Mar 2029

Established domain (5+ years) - High trust indicator

Registrar

RegistrarSEC

Registration Date

May 05, 1995 (30 years ago)

Last Updated

Sep 24, 2024

Expiration Date

Mar 02, 2029 (1093 days remaining)

Server Location

Germany

Abuse Contact

[email protected]

+1-650-308-7004

   Domain Name: THREADS.COM
   Registry Domain ID: 59285_DOMAIN_COM-VRSN
   Registrar WHOIS Server: whois.registrarsec.com
   Registrar URL: http://www.registrarsec.com
   Updated Date: 2024-09-24T15:39:57Z
   Creation Date: 1995-05-05T04:00:00Z
   Registry Expiry Date: 2029-03-02T04:59:59Z
   Registrar: RegistrarSEC LLC
   Registrar IANA ID: 2475
   Registrar Abuse Contact Email: [email protected]
   Registrar Abuse Contact Phone: +1-650-308-7004
   Domain Status: clientDeleteProhibited https://icann.org/epp#clientDeleteProhibited
   Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
   Domain Status: clientUpdateProhibited https://icann.org/epp#clientUpdateProhibited
   Name Server: A.NS.FACEBOOK.COM
   Name Server: B.NS.FACEBOOK.COM
   Name Server: C.NS.FACEBOOK.COM
   Name Server: D.NS.FACEBOOK.COM
   DNSSEC: unsigned
   URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/
>>> Last update of whois database: 2026-02-13T22:21:45Z <<<

For more information on Whois status codes, please visit https://icann.org/epp

NOTICE: The expiration date displayed in this record is the date the
registrar's sponsorship of the domain name registration in the registry is
currently set to expire. This date does not necessarily reflect the expiration
date of the domain name registrant's agreement with the sponsoring
registrar.  Users may consult the sponsoring registrar's Whois database to
view the registrar's reported date of expiration for this registration.

TERMS OF USE: You are not authorized to access or query our Whois
database through the use of electronic processes that are high-volume and
automated except as reasonably necessary to register domain names or
modify existing registrations; the Data in VeriSign Global Registry
Services' ("VeriSign") Whois database is provided by VeriSign for
information purposes only, and to assist persons in obtaining information
about or related to a domain name registration record. VeriSign does not
guarantee its accuracy. By submitting a Whois query, you agree to abide
by the following terms of use: You agree that you may use this Data only
for lawful purposes and that under no circumstances will you use this Data
to: (1) allow, enable, or otherwise support the transmission of mass
unsolicited, commercial advertising or solicitations via e-mail, telephone,
or facsimile; or (2) enable high volume, automated, electronic processes
that apply to VeriSign (or its computer systems). The compilation,
repackaging, dissemination or other use of this Data is expressly
prohibited without the prior written consent of VeriSign. You agree not to
use electronic processes that are automated and high-volume to access or
query the Whois database except as reasonably necessary to register
domain names or modify existing registrations. VeriSign reserves the right
to restrict your access to the Whois database in its sole discretion to ensure
operational stability.  VeriSign may restrict or terminate your access to the
Whois database for failure to abide by these terms of use. VeriSign
reserves the right to modify these terms at any time.

The Registry database contains ONLY .COM, .NET, .EDU domains and
Registrars.

DNS Configuration

Domain Name System records and email security configuration

Email Security

SPF

DKIM

DMARC

Basic

1

A

1

AAAA

5

TXT

4

NS

                                                            facebook-domain-verification=majzldde6hpot8e5i03ci1wq5e4qiu
                                                        

                                                            MS=F26DE149442774285AE4BE9E36790FFB
                                                        

                                                            google-site-verification=1F3OvAIcCXDeJ-mDb0ln7pDN-IufNLznoftF7RZX0s0
                                                        

                                                            google-site-verification=iwbg2_0IjhDFg0htAQPuQSx5KOgJB8mzuX-OfbeB0PA
                                                        

                                                            v=spf1 a ~all
                                                        

SPF

                                                            a.ns.facebook.com
                                                        

                                                            b.ns.facebook.com
                                                        

                                                            d.ns.facebook.com
                                                        

                                                            c.ns.facebook.com
                                                        

HTTP Headers

Key server response headers for security analysis.

Security (6)

HSTS

Content Security Policy

Clickjacking Protection

MIME Sniffing Protection

XSS Filter

COOP

Cache Policy

                                            private, no-cache, n...
                                        

{
    "location": "https:\/\/www.threads.com\/",
    "strict-transport-security": "max-age=31536000; preload; includeSubDomains",
    "x-stack": "www",
    "content-type": "text\/html; charset=\"utf-8\"",
    "x-fb-debug": "TL0kAXF9CGBJXjp4h\/GyxPj3A1vUaYv2jjd2r\/Q934J0yIVdtF4gdXU+EBFste7RcnSvEapWftpCrGmuYYXDlA==",
    "content-length": "0",
    "date": "Fri, 13 Feb 2026 22:22:03 GMT",
    "alt-svc": "h3=\":443\"; ma=86400",
    "x-fb-connection-quality": "EXCELLENT; q=0.9, rtt=13, rtx=0, c=16, mss=1380, tbw=3069, tp=-1, tpl=-1, uplat=111, ullat=0",
    "content-encoding": "gzip",
    "set-cookie": "csrftoken=2mCGSDQAZK5xqehC1fkrmH; expires=Sat, 20-Mar-2027 22:22:03 GMT; Max-Age=34560000; path=\/; domain=.threads.com; secure; SameSite=None",
    "accept-ch-lifetime": "4838400",
    "accept-ch": "viewport-width,dpr,Sec-CH-Prefers-Color-Scheme,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version,Sec-CH-UA-Model",
    "pragma": "no-cache",
    "cache-control": "private, no-cache, no-store, must-revalidate",
    "expires": "Sat, 01 Jan 2000 00:00:00 GMT",
    "content-security-policy": "default-src *.threads.com *.threads.net *.instagram.com *.facebook.com *.fbcdn.net blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net 127.0.0.1:* 'nonce-6daRictx' blob: 'self' static.cdninstagram.com 'wasm-unsafe-eval';style-src data: blob: 'unsafe-inline' *.fbcdn.net *.threads.com *.threads.net *.facebook.com *.instagram.com static.cdninstagram.com;connect-src *.threads.com *.threads.net wss:\/\/*.threads.com:* wss:\/\/*.threads.net:* *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss:\/\/*.facebook.com:* ws:\/\/localhost:* blob: *.instagram.com *.cdninstagram.com wss:\/\/*.instagram.com:* 'self';font-src data: static.cdninstagram.com;img-src *.threads.com *.threads.net *.instagram.com *.facebook.com *.fbcdn.net *.cdninstagram.com data: blob: about.fb.com engineering.fb.com *.fbsbx.com android-webview-video-poster: pps.whatsapp.net *.oculuscdn.com *.tenor.co *.tenor.com *.giphy.com https:\/\/www.gstatic.com;media-src *.threads.com *.threads.net *.instagram.com *.facebook.com *.fbcdn.net *.cdninstagram.com data: blob: *.fbsbx.com android-webview-video-poster: *.tenor.co *.tenor.com https:\/\/*.giphy.com https:\/\/www.gstatic.com;child-src *.threads.com *.threads.net *.instagram.com *.facebook.com *.fbcdn.net data: blob:;frame-src *.fbsbx.com 'self';manifest-src *.threads.com *.threads.net *.instagram.com *.facebook.com *.fbcdn.net data: blob:;object-src *.threads.com *.threads.net *.instagram.com *.facebook.com *.fbcdn.net data: blob:;worker-src *.threads.com *.threads.net *.instagram.com *.facebook.com *.fbcdn.net data: blob:;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script';",
    "document-policy": "include-js-call-stacks-in-crash-reports",
    "x-frame-options": "DENY",
    "x-content-type-options": "nosniff",
    "x-xss-protection": "0",
    "reporting-endpoints": "coop_report=\"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0\", coep_report=\"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0\", default=\"https:\/\/www.threads.com\/ajax\/barcelona_error_reports\/?device_level=unknown&brsid=7606478663069420819&cpp=C3&cv=1033441285&st=1771021323067\"",
    "report-to": "{\"max_age\":2592000,\"endpoints\":[{\"url\":\"https:\\\/\\\/www.facebook.com\\\/browser_reporting\\\/coop\\\/?minimize=0\"}],\"group\":\"coop_report\",\"include_subdomains\":true}, {\"max_age\":86400,\"endpoints\":[{\"url\":\"https:\\\/\\\/www.facebook.com\\\/browser_reporting\\\/coep\\\/?minimize=0\"}],\"group\":\"coep_report\"}, {\"max_age\":259200,\"endpoints\":[{\"url\":\"https:\\\/\\\/www.threads.com\\\/ajax\\\/barcelona_error_reports\\\/?device_level=unknown&brsid=7606478663069420819&cpp=C3&cv=1033441285&st=1771021323067\"}]}",
    "cross-origin-embedder-policy-report-only": "require-corp;report-to=\"coep_report\"",
    "cross-origin-opener-policy": "same-origin-allow-popups",
    "vary": "Accept-Encoding",
    "origin-agent-cluster": "?1"
}

IP Geolocation

Server location and network information

Germany

Frankfurt am Main

IP Address

57.144.244.192

ISP / Hosting

Facebook, Inc.

Coordinates

50.1169, 8.6837

Country Code

DE

View on Google Maps

Email Configuration

Email security and authentication records (SPF, DKIM, DMARC).

SPF Record

v=spf1 a ~all

Performance Metrics

Website loading speed and performance analysis

94

Fast

Load Time

0.29s

Excellent

Page Size

0.47MB

Optimized

Requests

80

Moderate

Overall

94/100

Performance score

Excellent! This website loads quickly and provides a great user experience.

Blacklist Check

Checking if this domain is listed on major security blacklists.

Google Safe Browsing

Safe

Discovered Subdomains

Publicly accessible subdomains associated with this domain.

www.threads.com

Privacy & Trackers

2 Trackers Found

Google Analytics

General

Google DoubleClick

General

These trackers may be used for analytics, advertising, or site functionality.

Website Screenshot

In-Depth Analysis

Overview

Threads.com, titled simply "Threads," is an e-commerce platform utilizing Shopify and React technologies. While it doesn't require a login, it facilitates online payments, suggesting it's a platform for purchasing goods or services.

Security Assessment

The website boasts a valid SSL certificate issued by DigiCert Inc, ensuring encrypted communication until February 2026. The domain is remarkably old, over 30 years, indicating stability and established presence. A significant positive signal is its clean status on Google Safe Browsing, meaning Google has not detected any malicious activity. The hosting location in Germany, managed by Facebook, Inc., further contributes to a robust infrastructure.

Trust Level

With a FlareScore of 78/100, Threads.com presents a moderate risk profile. This score reflects a generally safe browsing experience, reinforced by the SSL certificate, domain age, and clean Google Safe Browsing status.

Recommendations

While Threads.com appears secure, users should always exercise caution. Look for clear return policies and contact information. Be mindful of the two trackers present and consider using privacy-focused browser extensions. Since there is no privacy policy available, users should be careful about the information they share on the website.

User Reviews and Complaints

Share your experience with this site or ask questions. Your comments help the community.

Sign in to Share Your Experience

Join our community to leave reviews and help others make informed decisions.

Sign In Create Account

No reviews yet.

Analysis for

threads.com

FlareAI™ Summary