Analysis for

alwaysfit.com.br

Flare Score

Safe

FlareAI™ Summary

Always Fit (alwaysfit.com.br) appears to be a fitness-related website, built using WordPress and Shopify. Security indicators are positive: a valid SSL certificate from Google Trust Services is present, and the domain is not blacklisted according to Google Safe Browsing. With a FlareScore of 78/100, the site is considered safe. Users can generally trust the site, but should always exercise caution when entering personal information, especially regarding payment processing and user accounts.

+0.6%

than category average

Canada

Server Country

Unknown

Domain Age

Score Breakdown

How we calculated the Flare Score based on positive and negative signals.

Positive Signals

Valid SSL certificate from Google Trust Services

Not found on any blacklist (1 sources checked)

Strong email security (SPF, DKIM, DMARC configured)

Modern security headers configured (HSTS, CSP)

Good website performance

Active social media presence

Contact information available

Built with WordPress (established platform)

Uses CDN for better performance and security

Negative Signals

Very new domain (less than 3 months old)

WHOIS information hidden (privacy protection enabled)

Pro Tip: A valid SSL certificate is a basic requirement for any trustworthy site, but it doesn't guarantee the site is not a scam.

SSL & Security

SSL certificate and security headers configuration

Security Score

80/100

⚠ SSL Expired (20) ✓ HSTS (20) ✓ CSP (20) ✓ X-Frame (20)

SSL Certificate

Issuer

Google Trust Services

Valid From

Dec 02, 2025

Valid Until

Mar 02, 2026

Certificate Expired

Security Headers

HSTS

CSP

X-Frame-Options

How Was This Calculated?

Transparency into our FlareScore™ methodology and data sources used for this analysis.

alwaysfit.com.br Analysis

FlareScore™: 78/100 (Safe Risk)

Our analysis of alwaysfit.com.br identified 10 positive security indicators and 2 potential concerns. The FlareScore™ rating combines technical security measures, domain reputation, and content analysis.

SSL Certificate Analysis

AI Content Review

13 DNS Records

Analysis Sources

• SSL: Google Trust Services
• DNS: 13 records analyzed
• Content: Visual & text analysis

Last Checked

Jan 07, 2026
2 months ago

Transparency Note: Our analysis is based on publicly available data and automated scanning. For detailed methodology and accuracy metrics, visit our methodology page.

Domain & WHOIS Information

Domain Age

Unknown

Registered Unknown

Unknown Trust

Registrar

Unknown

Registration Date

N/A

Last Updated

Mar 11, 2025

Expiration Date

Oct 30, 2026 (231 days remaining)

Server Location

Canada

Abuse Contact

[email protected]

% Copyright (c) Nic.br - Use of this data is governed by the Use and
% Privacy Policy at https://registro.br/upp . Distribution,
% commercialization, reproduction, and use for advertising or similar
% purposes are expressly prohibited.
% 2026-01-07T10:57:34-03:00 - 5.39.19.21

domain:      alwaysfit.com.br
owner:       zhang ye
owner-c:     ZHAYE2
tech-c:      ZHAYE2
nserver:     emerson.ns.cloudflare.com
nsstat:      20260103 AA
nslastaa:    20260103
nserver:     roxy.ns.cloudflare.com
nsstat:      20260103 AA
nslastaa:    20260103
saci:        yes
created:     20191030 #20310151
changed:     20250311
expires:     20261030
status:      published

nic-hdl-br:  ZHAYE2
person:      zhang ye
created:     20191030
changed:     20251125

% Security and mail abuse issues should also be addressed to cert.br,
% respectivelly to [email protected] and [email protected]
%
% whois.registro.br only accepts exact match queries for domains,
% registrants, contacts, tickets, providers, IPs, and ASNs.

DNS Configuration

Domain Name System records and email security configuration

Email Security

SPF

DKIM

DMARC

Basic

TXT

                                                            aspmx.l.google.com
                                                        

                                                            alt1.aspmx.l.google.com
                                                        

                                                            alt2.aspmx.l.google.com
                                                        

                                                            alt3.aspmx.l.google.com
                                                        

                                                            alt4.aspmx.l.google.com
                                                        

                                                            tiktok-developers-site-verification=0JTLKQg4Z5pNxf6e2icNLJlxwSP3DqV8
                                                        

                                                            tiktok-developers-site-verification=fWC7yLdU7jh41THtl6b1erFULplT7Y9D
                                                        

                                                            v=spf1 mx include:_spf.google.com include:alwspf.alwaysfit.com.br include:_spf.kmitd.com include:spf.zoho.com include:transmail.net ~all
                                                        

SPF

                                                            V5YHGoP6yODMacyawJioUkR+KWA=
                                                        

HTTP Headers

Key server response headers for security analysis.

Security (5)

Clickjacking Protection

Content Security Policy

HSTS

XSS Filter

MIME Sniffing Protection

Web Server

                                            cloudflare
                                        

CDN Cache

                                            DYNAMIC
                                        

Cloudflare Ray ID

                                            9ba3f7082d55f13c-CDG
                                        

{
    "link": "<https:\/\/cdn.shopify.com>; rel=\"preconnect\", <https:\/\/cdn.shopify.com>; rel=\"preconnect\"; crossorigin, <https:\/\/cdn.shopify.com\/extensions\/0199e635-6342-7cb2-9a51-89166802e59d\/whatsapp-chat-63\/assets\/whatsapp-style.min.css>; as=\"style\"; rel=\"preload\"",
    "date": "Wed, 07 Jan 2026 13:57:34 GMT",
    "content-type": "text\/html; charset=utf-8",
    "content-encoding": "gzip",
    "x-sorting-hat-podid": "250",
    "x-sorting-hat-shopid": "64245235963",
    "x-storefront-renderer-rendered": "1",
    "etag": "W\/\"page_cache:64245235963:IndexController:ce1f94014757457d7e182c31679f0a0f\"",
    "speculation-rules": "\"\/cdn\/shopifycloud\/storefront\/assets\/storefront\/storefronts.specrules-dd5621a1.json\"",
    "set-cookie": "_shopify_analytics=:AZuYv6FtAAEA9SXbeRnhElSEH4svb5QdaAHxsHFJ0mr0zdggFtUBa82-ueSV0cftjYtgUDM:; Max-Age=31536000; Path=\/; HttpOnly; Secure; Priority=High; SameSite=Lax",
    "shopify-complexity-score": "540",
    "x-frame-options": "DENY",
    "content-security-policy": "block-all-mixed-content; frame-ancestors 'none'; upgrade-insecure-requests;",
    "strict-transport-security": "max-age=7889238",
    "x-shopid": "64245235963",
    "x-shardid": "250",
    "vary": "accept-encoding",
    "alt-svc": "h3=\":443\"; ma=86400",
    "content-language": "pt-BR",
    "powered-by": "Shopify",
    "server-timing": "cfRequestDuration;dur=107.000113, earlyhints",
    "x-dc": "gcp-europe-west1,gcp-europe-west1,gcp-europe-west1",
    "x-request-id": "98a428ee-8b62-47ac-8beb-826cf45e6a55-1767794254",
    "cf-cache-status": "DYNAMIC",
    "report-to": "{\"endpoints\":[{\"url\":\"https:\\\/\\\/a.nel.cloudflare.com\\\/report\\\/v4?s=X4Db%2BBcHkH%2B%2BLMWm%2BXHWhGqNCEt20mm7HK8Dhq2cBtfsXC8Xd8yino%2Bk1h9VLeaxdcMIkzqy8ukkRlk2W%2F03E30YHnVq8tjYxnBUZENUTFn2HFTmeFF%2FUeGvf7qpfRsz74w%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}",
    "nel": "{\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}",
    "x-xss-protection": "1; mode=block",
    "x-content-type-options": "nosniff",
    "x-permitted-cross-domain-policies": "none",
    "x-download-options": "noopen",
    "server": "cloudflare",
    "cf-ray": "9ba3f7082d55f13c-CDG"
}

IP Geolocation

Server location and network information

Canada

Ottawa

IP Address

23.227.38.65

ISP / Hosting

Cloudflare, Inc.

Coordinates

45.4153, -75.6894

Country Code

View on Google Maps

Email Configuration

Email security and authentication records (SPF, DKIM, DMARC).

SPF Record

v=spf1 mx include:_spf.google.com include:alwspf.alwaysfit.c...

DKIM

Configured

DMARC

v=DMARC1; p=quarantine; rua=mailto:[email protected]....

Performance Metrics

Website loading speed and performance analysis

Average

Load Time

0.13s

Excellent

Page Size

0.41MB

Optimized

Requests

320

Many

Overall

85/100

Performance score

Good performance, but there's room for optimization to improve loading speed.

Blacklist Check

Checking if this domain is listed on major security blacklists.

Google Safe Browsing

Safe

Discovered Subdomains

Publicly accessible subdomains associated with this domain.

www.alwaysfit.com.br

app.alwaysfit.com.br

Privacy & Trackers

2 Trackers Found

Google Analytics

General

Google Tag Manager

General

These trackers may be used for analytics, advertising, or site functionality.

Website Screenshot

In-Depth Analysis

Here's a cybersecurity analysis of alwaysfit.com.br:

Overview

Alwaysfit.com.br, judging by its title, likely offers fitness-related products or services. The website is built using WordPress and Shopify, suggesting e-commerce functionality. The presence of a login and payment system confirms this.

Security Assessment

The website utilizes a valid SSL certificate issued by Google Trust Services, ensuring encrypted communication and protecting user data during transmission. The certificate is valid until March 2026, indicating a proactive approach to security maintenance. Google Safe Browsing reports a clean status, a strong positive signal, indicating no known malware or phishing threats.

Trust Level

With a FlareScore of 78/100, alwaysfit.com.br is considered relatively safe. This score reflects the positive security measures in place, such as the valid SSL certificate and clean Google Safe Browsing status. However, the presence of trackers indicates potential data collection practices.

Recommendations

While the website appears secure, users should always exercise caution. Review the privacy policy to understand data collection practices. Use strong, unique passwords for your account and be wary of phishing attempts. The website's use of Google Analytics is common, but users concerned about tracking can use browser extensions to limit data collection.

User Reviews and Complaints

Share your experience with this site or ask questions. Your comments help the community.

Sign in to Share Your Experience

Join our community to leave reviews and help others make informed decisions.

No reviews yet.