Other
Nivea.nl has insufficient trustworthiness due to important trust criteria not being met. This may indicate risks for users visiting this site.
The site serves as the homepage for NIVEA, a well-known brand offering skincare products.
Verisite checked nivea.nl on July 1, 2026 and gave it a trust score of 39/100. Out of 885 checks, 328 passed, with 75 warning(s) and 482 failed check(s).
39
/100
Trust Score
Insufficient
Score incl. subdomains: 61/100
9
Passed
1
Warning
2
Failed
Security Headers
Checks HTTP security headers and cookie security configuration.
Some security headers are missing or weakly configured.
Information Exposure
Checks for exposed sensitive files, directory listings, and information disclosure.
Critical exposures found: sensitive files are publicly accessible.
Content Security
Scans page content for suspicious scripts, iframes, external forms, and cryptominers.
No suspicious content detected on the page.
SSL Certificate
Verifies the SSL/TLS certificate validity and configuration.
Valid SSL certificate found (expires 2026-09-14).
Domain Age
Checks the age of the domain registration. Very young domains are often associated with fraud.
The domain age could not be determined.
Privacy & Cookies
Checks for tracking cookies, consent mechanisms, and third-party trackers.
No tracking cookies or third-party trackers detected.
Business Data
Checks for chamber of commerce number, VAT number, contact details, and required legal pages.
An error occurred while performing this check.
Reviews & Trust Seals
Checks external reviews (Trustpilot) and trust seals (Kiyoh, WebwinkelKeur).
No reviews or trust seal found.
Malicious / Safety
Checks if the domain appears on known fraud or phishing lists.
This domain was not found on any known fraud or phishing lists.
Technology & Software
Detects CMS, frameworks, and JavaScript libraries and checks for outdated versions.
No outdated or vulnerable software detected.
Email Authentication
Analyzes SPF, DKIM and DMARC configuration for email authentication.
Email authentication is well configured with SPF, DKIM and/or DMARC.
Network & Transport
Checks open ports, HTTP protocol support, redirect chain, and mixed content.
Network configuration is secure and well optimized.
DNS & Server
Checks DNS records, server information and hosting details.
DNS records are properly configured.
Security Headers
Checks HTTP security headers and cookie security configuration.
57/100
Some security headers are missing or weakly configured.
- Domain
- nivea.nl
- Cookies
-
- Total: 0
- Issues:
- Secure cookies: 0
- Insecure cookies: 0
- HSTS max-age
- 31536000
- Information leaking headers
- X-Powered-By
- Missing headers
- Referrer-Policy, Permissions-Policy
- HSTS preload
- Yes
- Leaks X-Powered-By
- Next.js
- CSP contains unsafe-eval
- Yes
- CSP contains unsafe-inline
- Yes
- Used browser fallback
- No
- Referrer-Policy
- No
- X-Frame-Options
- Yes
- HSTS includes subdomains
- Yes
- Permissions-Policy
- No
- X-Content-Type-Options
- Yes
- Content-Security-Policy
- Yes
- Strict-Transport-Security
- Yes
Technology & Software
Detects CMS, frameworks, and JavaScript libraries and checks for outdated versions.
100/100
No outdated or vulnerable software detected.
- Detected CMS
-
- Name:
- Slug:
- Version:
- Detected: No
- Confidence: none
- Domain
- nivea.nl
- JavaScript libraries
- Pages scanned
- 2
- Vulnerable libraries
- Server technology
-
- Server:
- Powered by: Next.js
- X generator:
Information Exposure
Checks for exposed sensitive files, directory listings, and information disclosure.
60/100
Critical exposures found: sensitive files are publicly accessible.
- Domain
- nivea.nl
- Exposures
-
- /.svn/entries — critical — SVN repository exposed
- /.DS_Store — medium — macOS directory structure exposed
- Robots.txt analysis
-
- Exists: Yes
- Interesting paths: /Testing-Folder/, /Testing-Folder-QA/
- Paths checked
- 18
- Exposures found
- 2
- Directory listing enabled
- No
Email Authentication
Analyzes SPF, DKIM and DMARC configuration for email authentication.
100/100
Email authentication is well configured with SPF, DKIM and/or DMARC.
- SPF
-
- Exists: Yes
- Policy: hardfail
- Record: v=spf1 ip4:185.220.230.112/31 ip4:185.220.228.128/30 ip4:180.166.87.195 ip4:116.128.203.3 include:spf.protection.outlook.com -all
- Mechanisms: ip4:185.220.230.112/31, ip4:185.220.228.128/30, ip4:180.166.87.195, ip4:116.128.203.3, include:spf.protection.outlook.com, all
- Policy label: checks.email_spf_hardfail
- Authorized senders: IP-adres 185.220.230.112/31, IP-adres 185.220.228.128/30, IP-adres 180.166.87.195, IP-adres 116.128.203.3, Microsoft 365
- DKIM
-
- Found: Yes
- Selectors: selector1, selector2
- DMARC
-
- Exists: Yes
- Policy: reject
- Record: v=DMARC1; p=reject; fo=1; rua=mailto:beiersdorf@rua.dmp.cisco.com; ruf=mailto:beiersdorf@ruf.dmp.cisco.com
- Percentage:
- Policy label: checks.email_dmarc_reject
- Has reporting: Yes
- Subdomain policy:
- Domain
- nivea.nl
- Authorized senders
- IP-adres 185.220.230.112/31, IP-adres 185.220.228.128/30, IP-adres 180.166.87.195, IP-adres 116.128.203.3, Microsoft 365
Domain Age
Checks the age of the domain registration. Very young domains are often associated with fraud.
100/100
The domain age could not be determined.
- Domain
- nivea.nl
Privacy & Cookies
Checks for tracking cookies, consent mechanisms, and third-party trackers.
100/100
No tracking cookies or third-party trackers detected.
- Domain
- nivea.nl
- Detected trackers
- Pages scanned
- 2
- Total cookies
- 0
- Third-party trackers found
- 0
- Consent platform
- Consentmanager
- Tracking cookies
- Consent mechanism detected
- Yes
- Tracking cookies found
- 0
Network & Transport
Checks open ports, HTTP protocol support, redirect chain, and mixed content.
100/100
Network configuration is secure and well optimized.
- Domain
- nivea.nl
- Open ports
- HTTP version
- HTTP/2
- Mixed content domains
- Pages scanned
- 1
- Redirect chain
- http://nivea.nl, https://www.nivea.nl/
- HTTP/2 support
- Yes
- HTTP/3 support
- No
- Open ports found
- 0
- Redirect loop detected
- No
- Mixed content resources
- 0
- Redirect chain length
- 2
- HTTP redirects to HTTPS
- Yes
Content Security
Scans page content for suspicious scripts, iframes, external forms, and cryptominers.
80/100
No suspicious content detected on the page.
- Domain
- nivea.nl
- Cryptominer scripts
- Pages scanned
- 2
- External form domains
- External script sources
- Obfuscation patterns
- 0
- Cryptominers detected
- 0
- Suspicious iframe details
-
- //tm-eu.beiersdorf.com/ns.html?id=GTM-TGXN72RD — Hidden iframe
- //tm-eu.beiersdorf.com/ns.html?id=GTM-TGXN72RD — Hidden iframe — /products
- External form targets
- 0
- Obfuscated code patterns
- External script domains
- 0
- Suspicious iframes
- 2
Business Data
Checks for chamber of commerce number, VAT number, contact details, and required legal pages.
0/100
An error occurred while performing this check.
- Check
- Business Data
Reviews & Trust Seals
Checks external reviews (Trustpilot) and trust seals (Kiyoh, WebwinkelKeur).
10/100
No reviews or trust seal found.
- Domain
- nivea.nl
- Kiyoh trust seal found
- No
- Trust seal present
- No
- Review sources
- Trustpilot page
- https://www.trustpilot.com/review/nivea.nl
- Trustpilot profile found
- No
- WebwinkelKeur trust seal found
- No
Malicious / Safety
Checks if the domain appears on known fraud or phishing lists.
100/100
This domain was not found on any known fraud or phishing lists.
- Checked domain
- nivea.nl
SSL Certificate
Verifies the SSL/TLS certificate validity and configuration.
100/100
Valid SSL certificate found (expires 2026-09-14).
- Expiry date
- 2026-09-14
- Issuer
- Let's Encrypt
- Subject
- nivea.de
- Valid until
- 2026-09-14
- Valid from
- 2026-06-16
- TLS version
- TLSv1.3
- Serial number
- 054CFC2B002EDD1B9896DC5E397DA86C3258
DNS & Server
Checks DNS records, server information and hosting details.
90/100
DNS records are properly configured.
- IP Address
- 104.210.154.101
- SPF record
- Yes
- IPv6 support
- No
- DMARC record
- Yes
- DNSSEC
- No
- MX Records
- nivea-nl.mail.protection.outlook.com
- Nameservers
- ns5.netnames.net, ns6.netnames.net, ns1.netnames.net, ns2.netnames.net
- Reverse DNS
- bdf-ext-us.southcentralus.cloudapp.azure.com
- IP Addresses
- 104.210.154.101
- IPv6 Addresses
- Hosting provider
- Microsoft Azure
Discovered subdomains (1)
About this website
Nivea.nl is the official homepage of NIVEA, a brand recognized for its skincare products. The website provides information about their products and services, but it shows significant shortcomings in terms of safety and reliability.
Key facts about the site include that the technology and SSL security are in order. However, there are warnings and errors that jeopardize the site's trustworthiness, such as issues with security headers and a lack of verified business data.
What our scores mean for you
The warning regarding security headers indicates that there are partial issues affecting trust in the site. The failure of exposure means there is a concrete risk for users, which could lead to unwanted access to personal data. Additionally, the error with business data indicates that it could not be verified, leading to uncertainty about the site's legitimacy. Lastly, there are no reliable user reviews available, which further increases the risk.
Trust development
This section is not applicable as there is no previous score band.
What this means
Verisite is an independent platform that conducts automated trust checks on websites. This result means that visitors should be cautious when using Nivea.nl, given the associated risks. For the company, this can negatively impact their reputation and user trust.
Frequently asked questions
Does nivea.nl have a valid SSL certificate?
Yes, nivea.nl has a valid SSL certificate, ensuring a secure connection.
Is there a privacy policy on nivea.nl?
Yes, nivea.nl has a privacy policy, but it's important to check how they handle your data.
Has nivea.nl ever been reported for fraud?
No external fraud signals have been found on nivea.nl.
Why are there no user reviews on nivea.nl?
The absence of user reviews may indicate a lack of transparency or trust.
What does it mean that business data is unverified?
This means that the business information on the site could not be confirmed, which can pose a risk.
What are security headers and why are they important?
Security headers help ensure a website's safety. A warning indicates there is a risk.