Is fl0ra.xyz legit?
This site is currently dangerous and should be avoided entirely. The technical failure of its security certificate combined with a complete lack of business disclosure suggest this is not a legitimate operation.
Other average: 27/100 · based on 166 sites
Checked: May 21, 2026 at 6:03 PM UTC ·
Is fl0ra.xyz a scam? Here's what we found.
The site's security configuration is severely broken, failing to even present a valid SSL certificate for its own domain, which suggests a misconfigured or potentially malicious setup.
With a domain age of only 11 days and a complete lack of verifiable ownership or corporate identity, this site provides no basis for consumer trust.
The lack of any digital footprint or archived web history is expected for a very new site, but it remains a significant barrier to establishing credibility.
There is a total absence of contact details, an About page, or social presence, leaving visitors with no way to verify who is operating this service.
The site is entirely missing mandatory legal documentation like a privacy policy or terms of service, indicating a disregard for standard commercial practices.
While the DNS and email authentication records are configured reasonably well, they are inconsistent with the site's failure to resolve securely at the browser level.
Signals Detected
This site is not in the top 1 million most visited websites — this is normal for small or new businesses
No structured data markup found
This business has no Trustpilot presence — not unusual for smaller or newer companies
Resolves to: 68.65.123.56
Mail servers: mx1-hosting.jellyfish.systems., mx2-hosting.jellyfish.systems., mx3-hosting.jellyfish.systems.
Domain has SPF email authentication configured
Domain has DMARC email authentication configured
DNS providers: dns1.namecheaphosting.com., dns2.namecheaphosting.com.
Domain created 2026-05-09T22:27:32.0Z (11 days ago) — very new domain, high risk
Registered through Namecheap
Expires in 353 days
DNSSEC status from WHOIS
No favicon found — unusual for an established business
Could not reach site: Head "https://fl0ra.xyz": tls: failed to verify certificate: x509: certificate is valid for *.web-hosting.com, web-hosting.com, not fl0ra.xyz
No threats detected by Google Web Risk
No robots.txt file — common for small sites
SSL certificate is invalid: tls: failed to verify certificate: x509: certificate is valid for *.web-hosting.com, web-hosting.com, not fl0ra.xyz
Issued by Sectigo Limited (but certificate is invalid)
No sitemap found — common for smaller sites
Not found on any DNS blacklists
No snapshots found in the Wayback Machine — site may be very new
Website is live and responding
No obvious contact information found on homepage
No privacy policy or terms of service found
No dedicated legal-entity disclosure page detected — common and expected outside the EU, but required for commercial sites in Germany, France, Spain, Italy, and other EU jurisdictions.
No About / Team / Company page detected.
No social media links found on homepage
Could not query certificate transparency logs
Fast page load
Embed This Badge
Stay Safe Online
Good habits to protect yourself, no matter the scan result.
Never reuse passwords across sites.
Add a second layer of security to your accounts.
Always verify unfamiliar stores before entering payment info.