Analysis for

fluff.co

Flare Score

Warning

FlareAI™ Summary

Fluff.co, likely an e-commerce site utilizing Shopify, presents a moderate risk with a FlareScore of 74/100. It employs valid SSL encryption via Google Trust Services, securing data transmission. The domain has a clean blacklist status across monitored lists, including Google Safe Browsing, a positive indicator. User accounts and payment processing are enabled. Exercise caution and standard online shopping best practices when interacting with this site due to the moderate risk score.

+2.8%

than category average

Canada

Server Country

Unknown

Domain Age

Score Breakdown

How we calculated the Flare Score based on positive and negative signals.

Positive Signals

Valid SSL certificate from Google Trust Services

Not found on any blacklist (1 sources checked)

Modern security headers configured (HSTS, CSP)

Good website performance

Active social media presence

Built with Shopify (established platform)

Uses CDN for better performance and security

Negative Signals

Very new domain (less than 3 months old)

Pro Tip: A valid SSL certificate is a basic requirement for any trustworthy site, but it doesn't guarantee the site is not a scam.

SSL & Security

SSL certificate and security headers configuration

Security Score

80/100

⚠ SSL Expired (20) ✓ HSTS (20) ✓ CSP (20) ✓ X-Frame (20)

SSL Certificate

Issuer

Google Trust Services

Valid From

Nov 22, 2025

Valid Until

Feb 20, 2026

Certificate Expired

Security Headers

HSTS

CSP

X-Frame-Options

How Was This Calculated?

Transparency into our FlareScore™ methodology and data sources used for this analysis.

fluff.co Analysis

FlareScore™: 74/100 (Warning Risk)

Our analysis of fluff.co identified 8 positive security indicators and 1 potential concerns. The FlareScore™ rating combines technical security measures, domain reputation, and content analysis.

SSL Certificate Analysis

AI Content Review

14 DNS Records

Analysis Sources

• SSL: Google Trust Services
• DNS: 14 records analyzed
• Content: Visual & text analysis

Last Checked

Dec 28, 2025
2 months ago

Transparency Note: Our analysis is based on publicly available data and automated scanning. For detailed methodology and accuracy metrics, visit our methodology page.

DNS Configuration

Domain Name System records and email security configuration

Email Security

SPF

DKIM

DMARC

Basic

TXT

                                                            aspmx.l.google.com
                                                        

                                                            alt1.aspmx.l.google.com
                                                        

                                                            alt2.aspmx.l.google.com
                                                        

                                                            alt3.aspmx.l.google.com
                                                        

                                                            alt4.aspmx.l.google.com
                                                        

                                                            google-site-verification=MRhC2TyTts_98zSWJrY3Nh1iVbmPn-Ob8XmGmGr-ixc
                                                        

                                                            v=spf1 include:dc-aa8e722993._spfm.fluff.co ~all
                                                        

SPF

                                                            klaviyo-site-verification=UDyx5x
                                                        

                                                            v=spf1 include:sendgrid.net include:klaviyo.com include:_spf.google.com ~all
                                                        

SPF

                                                            google-site-verification=HUU_FTR3Nhk2Rl-xgYcTL0xtKOxGCZs3u6jSpUAOIiE
                                                        

HTTP Headers

Key server response headers for security analysis.

Security (5)

Clickjacking Protection

Content Security Policy

HSTS

XSS Filter

MIME Sniffing Protection

Web Server

                                            cloudflare
                                        

CDN Cache

                                            DYNAMIC
                                        

Cloudflare Ray ID

                                            9b4d09d93f2ce1fe-AMS
                                        

{
    "link": "<https:\/\/cdn.shopify.com>; rel=\"preconnect\", <https:\/\/cdn.shopify.com>; rel=\"preconnect\"; crossorigin",
    "date": "Sun, 28 Dec 2025 00:46:04 GMT",
    "content-type": "text\/html; charset=utf-8",
    "content-encoding": "gzip",
    "x-sorting-hat-podid": "293",
    "x-sorting-hat-shopid": "43450171553",
    "x-storefront-renderer-rendered": "1",
    "set-cookie": "_shopify_analytics=:AZtia2Y3AAEA6jxJIEblBaurzVeMK1LXjCcAJnfNCfo86_zJklybMnJbgeBlt4O3e6wDG-I:; Max-Age=31536000; Path=\/; HttpOnly; Secure; Priority=High; SameSite=Lax",
    "speculation-rules": "\"\/cdn\/shopifycloud\/storefront\/assets\/storefront\/storefronts.specrules-dd5621a1.json\"",
    "etag": "W\/\"page_cache:43450171553:IndexController:b8cf382841f29ed9cf2cd2cc34da9ea1\"",
    "shopify-complexity-score": "5830",
    "x-frame-options": "DENY",
    "content-security-policy": "block-all-mixed-content; frame-ancestors 'none'; upgrade-insecure-requests;",
    "strict-transport-security": "max-age=7889238",
    "x-shopid": "43450171553",
    "x-shardid": "293",
    "vary": "accept-encoding",
    "alt-svc": "h3=\":443\"; ma=86400",
    "content-language": "en-US",
    "powered-by": "Shopify",
    "server-timing": "cfRequestDuration;dur=634.999990, earlyhints",
    "x-dc": "gcp-europe-west4,gcp-europe-west1,gcp-europe-west1",
    "x-request-id": "55c4f422-d88a-41ac-b792-b1ccc20cb2c5-1766882763",
    "cf-cache-status": "DYNAMIC",
    "report-to": "{\"endpoints\":[{\"url\":\"https:\\\/\\\/a.nel.cloudflare.com\\\/report\\\/v4?s=xjTNTj91sR1EKb1lUxQ4J6TUQurj3sG%2FVb83qZnUgMPNgBkP3WfX5ERJFCup3L%2BGfgMFRha2duPbfsn0p4N9d9Bcmr4T1K3183W46kOZi9DZIoc6JC6dUMgI\"}],\"group\":\"cf-nel\",\"max_age\":604800}",
    "nel": "{\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}",
    "x-xss-protection": "1; mode=block",
    "x-content-type-options": "nosniff",
    "x-permitted-cross-domain-policies": "none",
    "x-download-options": "noopen",
    "server": "cloudflare",
    "cf-ray": "9b4d09d93f2ce1fe-AMS"
}

IP Geolocation

Server location and network information

Canada

Ottawa

IP Address

23.227.38.65

ISP / Hosting

Cloudflare, Inc.

Coordinates

45.4153, -75.6894

Country Code

View on Google Maps

Email Configuration

Email security and authentication records (SPF, DKIM, DMARC).

SPF Record

v=spf1 include:sendgrid.net include:klaviyo.com include:_spf...

DMARC

v=DMARC1; p=none

Performance Metrics

Website loading speed and performance analysis

Average

Load Time

0.11s

Excellent

Page Size

0.34MB

Optimized

Requests

232

Many

Overall

85/100

Performance score

Good performance, but there's room for optimization to improve loading speed.

Blacklist Check

Checking if this domain is listed on major security blacklists.

Google Safe Browsing

Safe

Discovered Subdomains

Publicly accessible subdomains associated with this domain.

www.fluff.co

shop.fluff.co

Privacy & Trackers

3 Trackers Found

Google Analytics

General

Hotjar

General

Cloudflare

General

These trackers may be used for analytics, advertising, or site functionality.

Website Screenshot

In-Depth Analysis

Overview

Fluff.co appears to be an e-commerce website, likely selling consumer goods, given its use of Shopify for its platform and the presence of login and payment functionalities. The absence of a website title makes it difficult to ascertain the exact nature of its products without further investigation.

Security Assessment

Fluff.co employs a valid SSL certificate issued by Google Trust Services, ensuring encrypted communication between the user and the server. This protects sensitive data like login credentials and payment information. The website is hosted behind Cloudflare, which provides DDoS protection and other security benefits. Crucially, Google Safe Browsing reports a clean status, indicating no known malware or phishing activity associated with the domain.

Trust Level

The FlareScore of 74/100 suggests a moderate level of risk. While the presence of SSL and a clean Google Safe Browsing report are positive indicators, the score indicates potential vulnerabilities. The use of 3 trackers raises privacy concerns.

Recommendations

Users should exercise caution when interacting with fluff.co. While the site appears legitimate, due diligence is advised. Carefully review the privacy policy to understand how personal data is collected and used. Use strong, unique passwords and consider using a password manager. Because of the medium FlareScore, monitor your bank statements for suspicious activity after making purchases.

User Reviews and Complaints

Share your experience with this site or ask questions. Your comments help the community.

Sign in to Share Your Experience

Join our community to leave reviews and help others make informed decisions.

No reviews yet.

Is This Your Website?

Claim your profile to respond to reviews and build trust with your audience.