Score Breakdown

How we calculated the Flare Score based on positive and negative signals.

Positive Signals

Valid SSL certificate from Let's Encrypt

Established domain (16+ years old)

WHOIS information publicly available

Registered with reputable registrar (Amazon Registrar, Inc.)

Not found on any blacklist (1 sources checked)

Strong email security (SPF, DKIM, DMARC configured)

Privacy policy present

Modern security headers configured (HSTS, CSP)

Good website performance

Active social media presence

Uses CDN for better performance and security

Negative Signals

Pro Tip: A valid SSL certificate is a basic requirement for any trustworthy site, but it doesn't guarantee the site is not a scam.

SSL & Security

SSL certificate and security headers configuration

Security Score

80/100

✓ Valid SSL (40) ✓ HSTS (20) ✓ CSP (20) ✗ X-Frame (20)

SSL Certificate

Issuer

Let's Encrypt

Valid From

Jan 31, 2026

Valid Until

May 01, 2026

58 days remaining

Security Headers

HSTS

CSP

How Was This Calculated?

Transparency into our FlareScore™ methodology and data sources used for this analysis.

gumroad.com Analysis

FlareScore™: 94/100 (Safe Risk)

Our analysis of gumroad.com identified 11 positive security indicators and 0 potential concerns. The FlareScore™ rating combines technical security measures, domain reputation, and content analysis.

SSL Certificate Analysis

Domain Age: 16 years 7 months

AI Content Review

18 DNS Records

Analysis Sources

• WHOIS: Amazon Registrar, Inc.
• SSL: Let's Encrypt
• DNS: 18 records analyzed
• Content: Visual & text analysis

Last Checked

Feb 05, 2026
3 weeks ago

Transparency Note: Our analysis is based on publicly available data and automated scanning. For detailed methodology and accuracy metrics, visit our methodology page.

Domain & WHOIS Information

Domain Age

16 years 7 months

Registered Jul 31, 2009

Very High Trust

Jul 2009 Expires Jul 2026

Established domain (5+ years) - High trust indicator

Registrar

Amazon Registrar

Registration Date

Jul 31, 2009 (16 years ago)

Last Updated

Jun 26, 2025

Expiration Date

Jul 31, 2026 (149 days remaining)

Server Location

Canada

Abuse Contact

[email protected]

+1.2024422253

   Domain Name: GUMROAD.COM
   Registry Domain ID: 1564161142_DOMAIN_COM-VRSN
   Registrar WHOIS Server: whois.registrar.amazon
   Registrar URL: http://registrar.amazon.com
   Updated Date: 2025-06-26T16:45:43Z
   Creation Date: 2009-07-31T16:42:26Z
   Registry Expiry Date: 2026-07-31T16:42:26Z
   Registrar: Amazon Registrar, Inc.
   Registrar IANA ID: 468
   Registrar Abuse Contact Email: [email protected]
   Registrar Abuse Contact Phone: +1.2024422253
   Domain Status: clientDeleteProhibited https://icann.org/epp#clientDeleteProhibited
   Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
   Domain Status: clientUpdateProhibited https://icann.org/epp#clientUpdateProhibited
   Name Server: JEFF.NS.CLOUDFLARE.COM
   Name Server: VENUS.NS.CLOUDFLARE.COM
   DNSSEC: unsigned
   URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/
>>> Last update of whois database: 2026-02-05T19:45:49Z <<<

For more information on Whois status codes, please visit https://icann.org/epp

NOTICE: The expiration date displayed in this record is the date the
registrar's sponsorship of the domain name registration in the registry is
currently set to expire. This date does not necessarily reflect the expiration
date of the domain name registrant's agreement with the sponsoring
registrar.  Users may consult the sponsoring registrar's Whois database to
view the registrar's reported date of expiration for this registration.

TERMS OF USE: You are not authorized to access or query our Whois
database through the use of electronic processes that are high-volume and
automated except as reasonably necessary to register domain names or
modify existing registrations; the Data in VeriSign Global Registry
Services' ("VeriSign") Whois database is provided by VeriSign for
information purposes only, and to assist persons in obtaining information
about or related to a domain name registration record. VeriSign does not
guarantee its accuracy. By submitting a Whois query, you agree to abide
by the following terms of use: You agree that you may use this Data only
for lawful purposes and that under no circumstances will you use this Data
to: (1) allow, enable, or otherwise support the transmission of mass
unsolicited, commercial advertising or solicitations via e-mail, telephone,
or facsimile; or (2) enable high volume, automated, electronic processes
that apply to VeriSign (or its computer systems). The compilation,
repackaging, dissemination or other use of this Data is expressly
prohibited without the prior written consent of VeriSign. You agree not to
use electronic processes that are automated and high-volume to access or
query the Whois database except as reasonably necessary to register
domain names or modify existing registrations. VeriSign reserves the right
to restrict your access to the Whois database in its sole discretion to ensure
operational stability.  VeriSign may restrict or terminate your access to the
Whois database for failure to abide by these terms of use. VeriSign
reserves the right to modify these terms at any time.

The Registry database contains ONLY .COM, .NET, .EDU domains and
Registrars.

DNS Configuration

Domain Name System records and email security configuration

Email Security

SPF

DKIM

DMARC

Basic

2

A

2

AAAA

5

MX

6

TXT

2

NS

1

                                                            aspmx.l.google.com
                                                        

5

                                                            alt2.aspmx.l.google.com
                                                        

5

                                                            alt1.aspmx.l.google.com
                                                        

10

                                                            aspmx2.googlemail.com
                                                        

10

                                                            aspmx3.googlemail.com
                                                        

                                                            google-site-verification=PgpLEes7We_6DhccKbUEiYcZ0pdoMFKC9nvJzv5llfo
                                                        

                                                            google-site-verification=lrFehNfjlR5pdQ9Yl1S3X4-HclWnL2hRE-lp5ciPfYs
                                                        

                                                            notion-domain-verification=sSdqoXWqKQb9UfQM5R80tQCvesneCxOsRl4uKtCzkZc
                                                        

                                                            status-page-domain-verification=8vj11whsslmd
                                                        

                                                            v=spf1 a mx ip4:67.225.137.176 include:sendgrid.net include:support.zendesk.com include:spf.mail.intercom.io include:stspg-customer.com include:_spf.google.com ?all
                                                        

SPF

                                                            MS=ms30035841
                                                        

HTTP Headers

Key server response headers for security analysis.

Security (4)

HSTS

MIME Sniffing Protection

XSS Filter

Content Security Policy

Web Server

                                            cloudflare
                                        

Cache Policy

                                            max-age=0, private,...
                                        

CDN Cache

                                            DYNAMIC
                                        

Cloudflare Ray ID

                                            9c94e96e4e9bc6ae-CDG
                                        

{
    "date": "Thu, 05 Feb 2026 19:46:05 GMT",
    "content-type": "text\/html; charset=utf-8",
    "content-encoding": "gzip",
    "strict-transport-security": "max-age=31536000",
    "x-revision": "3b6350587bae",
    "x-gr": "PROD",
    "link": "<https:\/\/assets.gumroad.com\/packs\/css\/design-6141856c.css>; rel=preload; as=style; crossorigin=anonymous; nopush,<https:\/\/assets.gumroad.com\/assets\/application-cbf244e9109e70d7b04497041636f00173a1e588f9b879b3a3ef11f8dfb86e5c.js>; rel=preload; as=script; nopush",
    "vary": "Accept, Origin",
    "cache-control": "max-age=0, private, must-revalidate",
    "set-cookie": "_gumroad_app_session=ctUXA%2Fq7SUMAnc3jPbQ0N%2FN1Z8yRriF1yJoBBQlTsryEHvdF%2FUu4Oq8UBJCIc0zhcfMrA%2BiR9Q%2FMYKDfvzP8swT6l%2F0q96kpL3TRPw41GDKy%2FjhSf1KTILDhexqsdokFxzvSO7%2FYfEDmzlcgmM06qkMTtiXBJjnJEzPMaA9kjJ%2Bc5ITVNkWfqnxnKHZeWqfiAk2xsad2dRYN6uJkKP8%2F529CbSm3o6I6kwthSZZ4wbNZfIVKwJhIhi6n62FEWYc3XYob8jb4uH7%2BuZFaFbXh5TyrKMjf77HfrLBvqK5PDG2TlDmEnEbCQkCSxj5vO9NSdacEE%2BRe2vBDzz7QAhyVTlKRNtHJwdM9BDsoyy%2BXFNVJzl%2FeadkT1Vjgmi6xUg%3D%3D--JKJXdJT6ffNfmEkD--pj1R937QxBN4XMmw9bU32w%3D%3D; domain=gumroad.com; path=\/; expires=Thu, 05 Mar 2026 19:46:05 GMT; secure; httponly; samesite=lax",
    "x-request-id": "514cf4e4-0d5a-4e45-9727-46d87cb46411",
    "x-runtime": "0.028936",
    "x-original-headers-class": "Hash",
    "x-content-type-options": "nosniff",
    "x-xss-protection": "1; mode=block",
    "x-download-options": "noopen",
    "x-permitted-cross-domain-policies": "none",
    "content-security-policy": "default-src https 'self'; child-src * data: blob:; connect-src 'self' blob: www.dropbox.com api.dropboxapi.com s3.amazonaws.com\/gumroad s3.amazonaws.com\/gumroad\/ s3.amazonaws.com\/gumroad-public-storage s3.amazonaws.com\/gumroad-public-storage\/ gumroad-public-storage.s3.amazonaws.com gumroad-public-storage.s3.amazonaws.com\/ www.google.com www.gstatic.com *.facebook.com *.facebook.net *.google-analytics.com *.g.doubleclick.net *.googletagmanager.com analytics.google.com *.analytics.google.com files.gumroad.com\/ d1bdh6c3ceakz5.cloudfront.net\/ *.braintreegateway.com www.paypalobjects.com *.paypal.com *.braintree-api.com iframe.ly help.gumroad.com gumroad.com wss:\/\/cable.gumroad.com assets.gumroad.com; font-src * data: blob:; frame-src * data: blob:; img-src * data: blob:; media-src * data: blob:; object-src * data: blob:; script-src 'self' 'unsafe-eval' ajax.cloudflare.com static.cloudflareinsights.com js.stripe.com api.stripe.com connect-js.stripe.com *.braintreegateway.com *.braintree-api.com www.paypalobjects.com *.paypal.com *.google-analytics.com *.googletagmanager.com optimize.google.com www.googleadservices.com www.google.com www.gstatic.com *.facebook.net *.facebook.com www.dropbox.com s.ytimg.com cdn.iframe.ly platform.twitter.com cdn.jwplayer.com *.jwpcdn.com gumroad.us3.list-manage.com analytics.twitter.com help.gumroad.com unpkg.com\/@lottiefiles\/lottie-player@latest\/ gumroad.com assets.gumroad.com 'nonce-w\/YYCIdd84OHRmS7LXUBM6IyCU5zxbBdGHHM0UqnYQw=' 'unsafe-inline'; style-src 'self' 'unsafe-inline' s.ytimg.com optimize.google.com fonts.googleapis.com assets.gumroad.com; worker-src * data: blob:",
    "cf-cache-status": "DYNAMIC",
    "server": "cloudflare",
    "cf-ray": "9c94e96e4e9bc6ae-CDG",
    "alt-svc": "h3=\":443\"; ma=86400"
}

IP Geolocation

Server location and network information

Canada

Toronto

IP Address

104.18.243.99

ISP / Hosting

Cloudflare, Inc.

Coordinates

43.6532, -79.3832

Country Code

CA

View on Google Maps

Email Configuration

Email security and authentication records (SPF, DKIM, DMARC).

SPF Record

v=spf1 a mx ip4:67.225.137.176 include:sendgrid.net include:...

DKIM

Configured

DMARC

v=DMARC1; p=none; pct=100; rua=mailto:[email protected]...

Performance Metrics

Website loading speed and performance analysis

85

Average

Load Time

0.28s

Excellent

Page Size

0.12MB

Optimized

Requests

154

Many

Overall

85/100

Performance score

Good performance, but there's room for optimization to improve loading speed.

Blacklist Check

Checking if this domain is listed on major security blacklists.

Google Safe Browsing

Safe

Discovered Subdomains

Publicly accessible subdomains associated with this domain.

www.gumroad.com

mail.gumroad.com

ftp.gumroad.com

smtp.gumroad.com

pop.gumroad.com

imap.gumroad.com

webmail.gumroad.com

admin.gumroad.com

blog.gumroad.com

forum.gumroad.com

+ 21 more subdomains

Privacy & Trackers

0 Trackers Found

Privacy Policy

Website Screenshot

In-Depth Analysis

Overview

Gumroad.com facilitates online sales for creators, enabling them to sell digital products, memberships, and physical goods directly to customers. The platform emphasizes simplicity and accessibility for creators seeking to monetize their content.

Security Assessment

Gumroad employs SSL encryption, validated by Let's Encrypt, ensuring secure data transmission. The domain's age (over 16 years) suggests established legitimacy. The site leverages Cloudflare's infrastructure, enhancing security and performance. Importantly, Google Safe Browsing reports a CLEAN status, indicating no detected malware or phishing threats, a strong positive signal.

Trust Level

With a FlareScore of 94/100, Gumroad presents a low risk to users. This high score reflects the site's robust security measures, long-standing domain, and clean reputation.

Recommendations

While Gumroad appears secure, users should still practice safe online habits. Verify the legitimacy of creators before purchasing, and use strong, unique passwords for your Gumroad account. Always be wary of unsolicited links or offers, even if they appear to come from Gumroad.

User Reviews and Complaints

Share your experience with this site or ask questions. Your comments help the community.

Sign in to Share Your Experience

Join our community to leave reviews and help others make informed decisions.

Sign In Create Account

No reviews yet.

Analysis for

gumroad.com

FlareAI™ Summary