Score Breakdown

How we calculated the Flare Score based on positive and negative signals.

Positive Signals

Valid SSL certificate from trusted issuer

Established domain (2+ years old)

Strong email security (SPF, DKIM, DMARC)

Has privacy policy and cookie compliance

Fast loading times

Active social media presence

Contact information available

Negative Signals

Pro Tip: A valid SSL certificate is a basic requirement for any trustworthy site, but it doesn't guarantee the site is not a scam.

SSL & Security

SSL certificate and security headers configuration

Security Score

80/100

✓ Valid SSL (40) ✓ HSTS (20) ✗ CSP (20) ✓ X-Frame (20)

SSL Certificate

Issuer

Google Trust Services

Valid From

Sep 14, 2025

Valid Until

Dec 13, 2025

12 days remaining

Security Headers

HSTS

X-Frame-Options

Domain & WHOIS Information

Domain Age

20 years 11 months

Registered Dec 15, 2004

Very High Trust

Dec 2004 Expires Dec 2025

Expires in 0 days

Domain expires soon - Renewal may be pending

Established domain (5+ years) - High trust indicator

Registrar

MarkMonitor

Registration Date

Dec 15, 2004 (20 years ago)

Last Updated

Nov 13, 2024

Expiration Date

Dec 15, 2025 (0 days remaining)

Server Location

Canada

Abuse Contact

N/A

   Domain Name: VIMEO.COM
   Registry Domain ID: 137446492_DOMAIN_COM-VRSN
   Registrar WHOIS Server: whois.markmonitor.com
   Registrar URL: http://www.markmonitor.com
   Updated Date: 2024-11-13T10:54:35Z
   Creation Date: 2004-12-15T08:38:55Z
   Registry Expiry Date: 2025-12-15T08:38:55Z
   Registrar: MarkMonitor Inc.
   Registrar IANA ID: 292
   Registrar Abuse Contact Email: [email protected]
   Registrar Abuse Contact Phone: +1.2086851750
   Domain Status: clientDeleteProhibited https://icann.org/epp#clientDeleteProhibited
   Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
   Domain Status: clientUpdateProhibited https://icann.org/epp#clientUpdateProhibited
   Name Server: NS-1463.AWSDNS-54.ORG
   Name Server: NS-1886.AWSDNS-43.CO.UK
   Name Server: NS-682.AWSDNS-21.NET
   Name Server: NS-70.AWSDNS-08.COM
   DNSSEC: unsigned
   URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/
>>> Last update of whois database: 2025-11-08T10:35:38Z <<<

For more information on Whois status codes, please visit https://icann.org/epp

NOTICE: The expiration date displayed in this record is the date the
registrar's sponsorship of the domain name registration in the registry is
currently set to expire. This date does not necessarily reflect the expiration
date of the domain name registrant's agreement with the sponsoring
registrar.  Users may consult the sponsoring registrar's Whois database to
view the registrar's reported date of expiration for this registration.

TERMS OF USE: You are not authorized to access or query our Whois
database through the use of electronic processes that are high-volume and
automated except as reasonably necessary to register domain names or
modify existing registrations; the Data in VeriSign Global Registry
Services' ("VeriSign") Whois database is provided by VeriSign for
information purposes only, and to assist persons in obtaining information
about or related to a domain name registration record. VeriSign does not
guarantee its accuracy. By submitting a Whois query, you agree to abide
by the following terms of use: You agree that you may use this Data only
for lawful purposes and that under no circumstances will you use this Data
to: (1) allow, enable, or otherwise support the transmission of mass
unsolicited, commercial advertising or solicitations via e-mail, telephone,
or facsimile; or (2) enable high volume, automated, electronic processes
that apply to VeriSign (or its computer systems). The compilation,
repackaging, dissemination or other use of this Data is expressly
prohibited without the prior written consent of VeriSign. You agree not to
use electronic processes that are automated and high-volume to access or
query the Whois database except as reasonably necessary to register
domain names or modify existing registrations. VeriSign reserves the right
to restrict your access to the Whois database in its sole discretion to ensure
operational stability.  VeriSign may restrict or terminate your access to the
Whois database for failure to abide by these terms of use. VeriSign
reserves the right to modify these terms at any time.

The Registry database contains ONLY .COM, .NET, .EDU domains and
Registrars.

DNS Configuration

Domain Name System records and email security configuration

Email Security

SPF

DKIM

DMARC

Basic

2

A

5

MX

45

TXT

4

NS

1

                                                            aspmx.l.google.com
                                                        

5

                                                            alt1.aspmx.l.google.com
                                                        

5

                                                            alt2.aspmx.l.google.com
                                                        

10

                                                            aspmx2.googlemail.com
                                                        

10

                                                            aspmx3.googlemail.com
                                                        

                                                            mosyle-verification-326584517
                                                        

                                                            openai-domain-verification=dv-jLpzDoIthu5YP30T9S28cHgn
                                                        

                                                            parallels-domain-verification=6074395df5334b55afeea25a7a158ad484372217232842ebb488297a740e23c1
                                                        

                                                            pendo-domain-verification=6b8dfe6a-b123-4af8-a9d1-34f905d0d913
                                                        

                                                            smartsheet-site-validation=Z_Zhh94Jn680XCzJ92bQI72bIBCat5Vw
                                                        

                                                            stripe-verification=0905bcb5e5ed859c59ffac03f0580752c43adbd9282bb40aa1d68b6f93742a43
                                                        

                                                            stripe-verification=515b72a65b4832050e6f4076d2db128f4e88520c3b5fb553475b1df83fdb32e9
                                                        

                                                            stripe-verification=8c8a6dfe7831b0d791528fb81c0f1302f0d2919a5cce9e455045feb2dda61868
                                                        

                                                            stripe-verification=8f5465c02af6b9e2739d83ed01d0231504d39f845e6ab2c500ebe9fa5884934c
                                                        

                                                            stripe-verification=9C62CFA25412CCA90EEFA2F73D0FAB0569988DAE456E14993A808C05DEBAA460
                                                        

                                                            stripe-verification=9d282334c83ec1bad81c10522b09ecbe5ab60b559747c606f318bc4071a7899e
                                                        

                                                            stripe-verification=E1C768C81651F3AB136567486779A84AAA7BFB9BB069E433B6D2D9396FAD8E69
                                                        

                                                            stripe-verification=ba8501efece26680bae276979f5c24f1248cc3ca389b87a1c20889cec54438b4
                                                        

                                                            stripe-verification=c63db8272ec91b68ebacdbe0526f7f976eb7cf5907ce4f45ea6bca970a33659d
                                                        

                                                            v=spf1 include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email include:mail.zendesk.com include:helpscoutemail.com ~all
                                                        

SPF

                                                            yilRhWU2gaWPjUDNJn7Jzxym+9x0hezYabN6SdN0jgD6pU1GgIjgsbqxpR9VIAzo/zsaOf9UCfGqqG0J6onbIw==
                                                        

                                                            zoho-verification=zb15890134.zmverify.zoho.com
                                                        

                                                            834wn8161vj1q0sw515h2p3pkc3nwwpy
                                                        

                                                            MS=ms11883597
                                                        

                                                            MS=ms31258684
                                                        

                                                            MS=ms50463091
                                                        

                                                            _globalsign-domain-verification=-ogVhboN12TmJn3fnj8AgBTj2LhZkXy26R2M6hIT_Q
                                                        

                                                            _globalsign-domain-verification=u43aixYwit_P_nZo8n15y__KZcxnZCg08KEe5iho2D
                                                        

                                                            _x7awpslobtj17k90mhi3bdsfn4fpiqg
                                                        

                                                            adobe-idp-site-verification=2b3f171733f9ec79ece6f6deb429f4f4ddf5d3df3e66bf5460e040eb4489cb50
                                                        

                                                            amazonses:aG3MHmiDMfK+ROMMdC2TI3pgSqB/irrc/EffhZm8fpY=
                                                        

                                                            apple-domain-verification=hqseHhrDZs9mvnIu
                                                        

                                                            atlassian-domain-verification=OQUW8wO6JYgjdHThsMyRzUbqCNuYUJ1qA4ryjBsCIcdOFxvr5pFrW4Dt27ZDhLRq
                                                        

                                                            brave-ledger-verification=ea3ce87b613b3706879f8d5c90b564eaa08b31e0d1c1bd59175aa394ef7c8c63
                                                        

                                                            ca3-c918c5d16cb8495caffedfd48de3b949
                                                        

                                                            canva-site-verification=DQAQJSZSFIPE9wLghNGucA
                                                        

                                                            docker-verification=bc8a3b85-f3de-4303-a77b-5963968dd27d
                                                        

                                                            dropbox-domain-verification=i3wbe0w3wzci
                                                        

                                                            facebook-domain-verification=m3jcqq4qg23ihpjh5w5x5iswpyg6by
                                                        

                                                            google-site-verification=-eOb-DlXc3e9Qy6WVinkTxCyRa0MtgCqrlMMtRcyEa8
                                                        

                                                            google-site-verification=RcUDKcVx4BFOK12yi3crRyHO0A4ys1NdWSC-q5pA0Aw
                                                        

                                                            google-site-verification=UYx7dBka_Zr85ae_GcZlDBs_FkRo3loBwU3GDL0rXkA
                                                        

                                                            google-site-verification=e8qUoscBYD-sPanSS-r0dcYo9EaoIBbLBoyMaBv3sKg
                                                        

                                                            google-site-verification=hMdG7S08M7DLvcHiWDzVzvXxZUsfkruKr0Uo_oCLO0Y
                                                        

                                                            google-site-verification=henfs-vWflKItEV28eNNiXdcPPLeB8FAkluqr0wm4i0
                                                        

                                                            google-site-verification=hvy1Rpbhxy-S65t34-vb8qhUKGvEGtfPBciS1TQMl3M
                                                        

                                                            hs-m4HC9yjhxb9JdEsZisAQJEx6
                                                        

                                                            hubspot-developer-verification=NWMyOWIzNzAtNWUwNS00MjVlLTlkMjMtYmIyYmY5YzczNTk3
                                                        

                                                            jetbrains-domain-verification=3ng8i2b2sjr1ojnpfa4akr6ry
                                                        

                                                            mongodb-site-verification=SMYuJ9hNJ78bA03BaqnO5p8HrRn5pnIx
                                                        

                                                            ns-70.awsdns-08.com
                                                        

                                                            ns-1463.awsdns-54.org
                                                        

                                                            ns-1886.awsdns-43.co.uk
                                                        

                                                            ns-682.awsdns-21.net
                                                        

HTTP Headers

Key server response headers for security analysis.

Security (4)

XSS Filter

MIME Sniffing Protection

Clickjacking Protection

HSTS

Web Server

                                            cloudflare
                                        

Proxy/CDN

                                            1.1 varnish (Varnish...
                                        

Cache Policy

                                            no-store, no-cache,...
                                        

Cache Status

                                            MISS, MISS
                                        

CDN Cache

                                            DYNAMIC
                                        

Cloudflare Ray ID

                                            99b46cf71da1845a-AMS
                                        

{
    "Date": "Sat, 08 Nov 2025 10:35:47 GMT",
    "Content-Type": "text\/html; charset=UTF-8",
    "Transfer-Encoding": "chunked",
    "Connection": "keep-alive",
    "Content-Encoding": "gzip",
    "expires": "Sat, 08 Nov 2025 10:37:51 GMT",
    "x-vimeo-device": "d",
    "x-ua-compatible": "IE=edge",
    "x-xss-protection": "1; mode=block",
    "x-content-type-options": "nosniff",
    "x-frame-options": "sameorigin",
    "strict-transport-security": "max-age=31536000; includeSubDomains; preload",
    "reporting-endpoints": "csp-endpoint=\"https:\/\/browser-intake-datadoghq.com\/api\/v2\/logs?dd-api-key=puba92ed04ee7cceea44335c3d8c1ccc173&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=service%3Acspreport%2Cenv%3Aproduction\"",
    "content-security-policy-report-only": "default-src 'self' f.vimeocdn.com; connect-src 'self' blob: data: ws: wss: *.6sc.co *.6sense.com *.agora.io *.akamaized.net clientassets.sightera.com.s3.amazonaws.com https:\/\/d263mgllkjh2k2.cloudfront.net http:\/\/d1ripsxh7es2qp.cloudfront.net https:\/\/d3fclmoge30w0w.cloudfront.net cognito-identity.us-east-1.amazonaws.com cognito-identity.us-west-1.amazonaws.com https:\/\/s3.amazonaws.com\/beast.branding.sightera.com https:\/\/s3.amazonaws.com\/beast.business.sightera.com https:\/\/s3.amazonaws.com\/beast.business.sightera.com\/ https:\/\/s3.amazonaws.com\/beast.branding.sightera.com\/ https:\/\/s3.amazonaws.com\/test.sightera.com\/ https:\/\/s3.amazonaws.com\/business.sightera.com\/ https:\/\/s3.amazonaws.com\/sound.sightera.com\/ sqs.us-east-1.amazonaws.com sqs.us-west-1.amazonaws.com wirewax.s3.eu-west-1.amazonaws.com *.amplitude.com vimeo.bynder.com bat.bing-int.com bat.bing.com bat.bing.net www.bing.com api.branch.io cdn.builder.io https:\/\/d1ripsxh7es2qp.cloudfront.net http:\/\/d1oca24q5dwo6d.cloudfront.net media.gettyimages.com d2by6sxflmuwyq.cloudfront.net duysrfiajusdh.cloudfront.net dv7a7fjpjy29e.cloudfront.net cdn.cookielaw.org browser-intake-datadoghq.com ad.doubleclick.net *.g.doubleclick.net *.elfsight.com fp.service.expressplay.com pr.service.expressplay.com wv.service.expressplay.com www.facebook.com api.figma.com *.firebaseio.com tracking-api.g2.com *.getsmartling.com *.google.ae *.google.com *.google.ca *.google.ch *.google.es *.google.fr *.google.ge *.google.iq *.google.is *.google.it *.google.pl *.google.se *.google.si *.google.rs *.google.co.jp *.google.co.kr *.google.co.nz *.google.co.th *.google.co.uk *.google.com.ar *.google.com.au *.google.com.br *.google.com.mx *.google.com.pk *.google.com.sa *.google.com.tr *.google.com.uk *.google.de *.analytics.google.com *.google-analytics.com www.googleadservices.com *.googleapis.com csi.gstatic.com pagead2.googlesyndication.com *.googletagmanager.com api.greenhouse.io *.hivestreaming.com 117151225.intellimizeio.com *.intellimize.co *.kollective.app *.kollective.app:31015 *.kollectivecd.com leatherback-dot-vimeo-prod.appspot.com snap.licdn.com px.ads.linkedin.com linkedin.com *.litix.io *.cdn.magisto.com vimeo.magisto.com *.maze.co 582-gou-684.mktoresp.com js-agent.newrelic.com t.paypal.com data.pendo.io *.pndsn.com privacyportal.onetrust.com privacyportal-cdn.onetrust.com app.qualified.com *.qualtrics.com pixel-config.reddit.com www.redditstatic.com *.riskified.com *.statscollector.ap.sd-rtn.com *.ap.sd-rtn.com *.sd-rtn.com o209747.ingest.us.sentry.io sierra.chat simonsignal.com static.simonsignal.com sdk-api-v1.singular.net web-sdk-cdn.singular.net telemetry.transcend.io transcend-cdn.com https:\/\/drm.vhx.com\/v2\/fairplay\/cert collector.vhx.tv *.cloud.vimeo.com interactive.create.vimeo.com *.vimeo.com vimeo.com *.vimeo.work *.vimeocdn.com cdn.widerfunnel.com appds8093.blob.core.windows.net *.wirewax.com *.wirewax.tv *.zdassets.com vimeosupport.zendesk.com *.zoom.us zoom.us ws.zoominfo.com api.box.com public.boxcloud.com; font-src 'self' data: d2by6sxflmuwyq.cloudfront.net dv7a7fjpjy29e.cloudfront.net fonts.gstatic.com *.cdn.magisto.com privacyportal-cdn.onetrust.com www.paypalobjects.com cf-st.sc-cdn.net use.typekit.net f.vimeocdn.com edge-assets.wirewax.com cdn01.boxcdn.net; frame-src *; img-src * blob: data:; media-src 'self' blob: data: *.akamaized.net https:\/\/d263mgllkjh2k2.cloudfront.net http:\/\/d1oca24q5dwo6d.cloudfront.net duysrfiajusdh.cloudfront.net media.gettyimages.com *.gvt1.com *.cdn.magisto.com *.eu.cloud.vimeo.com live-api.cloud.vimeo.com player.vimeo.com *.vimeocdn.com app.qualified.com https:\/\/s3.amazonaws.com\/sound.sightera.com\/ https:\/\/s3.amazonaws.com\/test.sightera.com\/ https:\/\/s3.amazonaws.com\/beast.business.sightera.com\/ https:\/\/s3.amazonaws.com\/beast.business.sightera.com https:\/\/s3.amazonaws.com\/beast.branding.sightera.com\/ https:\/\/storage.googleapis.com\/vimeo-create-prod-files\/ http:\/\/d1ripsxh7es2qp.cloudfront.net https:\/\/d3fclmoge30w0w.cloudfront.net https:\/\/storage.googleapis.com\/vimeo-prod-upload-create-us-east1\/ https:\/\/storage.googleapis.com\/vimeo-prod-upload-create-europe-west1\/ https:\/\/storage.googleapis.com\/vimeo-storage-dev-upload-create-us-east1\/ https:\/\/storage.googleapis.com\/vimeo-storage-dev-upload-create-europe-west1\/; object-src 'self' *.vimeocdn.com *.akamaized.net; script-src 'unsafe-inline' 'unsafe-eval' 'self' data: ws: wss: https:\/\/s0.2mdn.net\/instream\/video\/ *.6sc.co wirewax.s3.eu-west-1.amazonaws.com app.link bat.bing-int.com bat.bing.com cdnjs.cloudflare.com challenges.cloudflare.com www.datadoghq-browser-agent.com *.g.doubleclick.net www.dropbox.com static.elfsight.com *.elfsightcdn.com connect.facebook.net *.firebaseio.com tracking.g2crowd.com *.google.com www.googleadservices.com www.gstatic.com *.google-analytics.com maps.googleapis.com pendo-io-static.storage.googleapis.com pendo-static-6633483048714240.storage.googleapis.com pagead2.googlesyndication.com www.googletagmanager.com www.googletagservices.com cdn.intellimize.co *.kollective.app snap.licdn.com src.litix.io lp.livestream.com munchkin.marketo.net snippet.maze.co privacyportal-cdn.onetrust.com www.paypalobjects.com cdn.pendo.io js.qualified.com data.pendo.io *.qualtrics.com www.redditstatic.com beacon.riskified.com secured-pixel.com sierra.chat static.simonsignal.com web-sdk-cdn.singular.net transcend-cdn.com vimeo.com *.vimeo.com *.vimeocdn.com cdn.widerfunnel.com edge-assets.wirewax.com embedder-sdk.wirewax.com embedder-sdk.wirewax.tv origin-4.xtlo.net static.zdassets.com *.zoom.us zoom.us ws.zoominfo.com static.zuora.com https:\/\/www.dropbox.com\/static\/api\/2\/dropins.js cdn01.boxcdn.net; style-src 'self' 'unsafe-inline' *.6sc.co cdn01.boxcdn.net cdnjs.cloudflare.com accounts.google.com fonts.googleapis.com pendo-static-6633483048714240.storage.googleapis.com www.gstatic.com lp.livestream.com privacyportal-cdn.onetrust.com www.paypalobjects.com sierra.chat *.vimeo.com *.vimeocdn.com vimeopro.com transcend-cdn.com cdn.widerfunnel.com edge-assets.wirewax.com edge-player5.wirewax.com origin-4.xtlo.net; worker-src 'self' blob:; report-to csp-endpoint; report-uri https:\/\/browser-intake-datadoghq.com\/api\/v2\/logs?dd-api-key=puba92ed04ee7cceea44335c3d8c1ccc173&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=service%3Acspreport%2Cenv%3Aproduction",
    "x-bapp-server": "pweb-7fc8bc74f9-lxqt4",
    "Age": "176",
    "via": "1.1 varnish (Varnish\/6.0), 1.1 varnish, 1.1 varnish",
    "Cache-Control": "no-store, no-cache, must-revalidate, post-check=0, pre-check=0",
    "x-varnish-cache": "1",
    "x-vserver": "web-varnish-77575bbdb5-hkd4d",
    "x-backend-proxy": "web-varnish-77575bbdb5-hkd4d",
    "x-served-by": "cache-iad-kiad7000088-IAD, cache-rtm-ehrd2290020-RTM",
    "x-cache": "MISS, MISS",
    "x-cache-hits": "0, 0",
    "x-timer": "S1762598148.702979,VS0,VE95",
    "vary": "Accept-Encoding, X-Geo-Vary-Group, Crossroads-Backend,x-http-method-override",
    "cf-cache-status": "DYNAMIC",
    "Set-Cookie": "_cfuvid=N8kv2eXQOYAZLJKjkH.E78bHk4zCJ1JR5ww2sMwKkEE-1762598147805-0.0.1.1-604800000; path=\/; domain=.vimeo.com; HttpOnly; Secure; SameSite=None",
    "Server": "cloudflare",
    "CF-RAY": "99b46cf71da1845a-AMS"
}

IP Geolocation

Server location and network information

Canada

Toronto

IP Address

162.159.138.60

ISP / Hosting

Cloudflare, Inc.

Coordinates

43.6532, -79.3832

Country Code

CA

View on Google Maps

Email Configuration

Email security and authentication records (SPF, DKIM, DMARC).

SPF Record

v=spf1 include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email incl...

DKIM

Configured

DMARC

v=DMARC1; p=reject; sp=reject; pct=100; adkim=r; aspf=r; rua...

Performance Metrics

Website loading speed and performance analysis

81

Average

Load Time

0.33s

Excellent

Page Size

1.58MB

Acceptable

Requests

200

Many

Overall

81/100

Performance score

Good performance, but there's room for optimization to improve loading speed.

Blacklist Check

Checking if this domain is listed on major security blacklists.

Spamhaus DBL

Blacklisted

SURBL

Safe

Discovered Subdomains

Publicly accessible subdomains associated with this domain.

www.vimeo.com

mail.vimeo.com

api.vimeo.com

dev.vimeo.com

assets.vimeo.com

portal.vimeo.com

help.vimeo.com

Privacy & Trackers

0 Trackers Found

Privacy Policy

Website Screenshot

In-Depth Analysis

Overview

Vimeo.com is an AI-powered video platform designed for creatives, entrepreneurs, and businesses to create, manage, and share videos. It offers a comprehensive suite of tools for video hosting, editing, and distribution.

Security Assessment

Vimeo.com utilizes a valid SSL certificate issued by Google Trust Services, ensuring encrypted communication. The domain has been active for over 20 years, indicating established legitimacy. However, its presence on one blacklist is a concern. The hosting infrastructure relies on Cloudflare, which provides robust DDoS protection and content delivery network (CDN) services.

Trust Level

With a FlareScore of 83/100, Vimeo.com is considered relatively safe. The score suggests a moderate level of risk, primarily due to the blacklist listing, which warrants caution.

Recommendations

Exercise caution due to the blacklist listing. Investigate the nature of the listing before uploading sensitive content.
Review Vimeo's privacy policy to understand data collection and usage practices.
Use strong, unique passwords and enable two-factor authentication if available to protect your account.
Be wary of phishing attempts or suspicious links related to Vimeo.

User Reviews and Complaints

Share your experience with this site or ask questions. Your comments help the community.

Sign in to Share Your Experience

Join our community to leave reviews and help others make informed decisions.

Sign In Create Account

No reviews yet.

Analysis for

vimeo.com

FlareAI™ Summary