Analysis for

heygen.com

Flare Score

Safe

FlareAI™ Summary

HeyGen.com enables users to create AI videos from text, images, or audio, generating complete videos with narration and visuals. The site demonstrates strong security with a valid SSL certificate from Google, a 10-year domain age, and a clean Google Safe Browsing status. With a FlareScore of 92/100, HeyGen is considered safe. Users can generally trust this platform for AI video generation, but should always practice standard online safety.

+9.7%

than category average

United States

Server Country

10 years

Domain Age

Score Breakdown

How we calculated the Flare Score based on positive and negative signals.

Positive Signals

Valid SSL certificate from trusted issuer

Established domain (2+ years old)

Not found on any blacklist (1 sources checked)

Strong email security (SPF, DKIM, DMARC)

Has privacy policy and cookie compliance

Fast loading times

Active social media presence

Negative Signals

Pro Tip: A valid SSL certificate is a basic requirement for any trustworthy site, but it doesn't guarantee the site is not a scam.

SSL & Security

SSL certificate and security headers configuration

Security Score

60/100

✓ Valid SSL (40) ✓ HSTS (20) ✗ CSP (20) ✗ X-Frame (20)

SSL Certificate

Issuer

Google Trust Services

Valid From

Sep 16, 2025

Valid Until

Dec 15, 2025

14 days remaining

Security Headers

HSTS

Domain & WHOIS Information

Domain Age

10 years 1 months

Registered Oct 19, 2015

Very High Trust

Oct 2015 Expires Oct 2027

Established domain (5+ years) - High trust indicator

Registrar

Cloudflare

Registration Date

Oct 19, 2015 (10 years ago)

Last Updated

Jul 16, 2025

Expiration Date

Oct 19, 2027 (0 days remaining)

Server Location

United States

Abuse Contact

N/A

   Domain Name: HEYGEN.COM
   Registry Domain ID: 1969996989_DOMAIN_COM-VRSN
   Registrar WHOIS Server: whois.cloudflare.com
   Registrar URL: http://www.cloudflare.com
   Updated Date: 2025-07-16T04:16:17Z
   Creation Date: 2015-10-19T18:22:03Z
   Registry Expiry Date: 2027-10-19T18:22:03Z
   Registrar: Cloudflare, Inc.
   Registrar IANA ID: 1910
   Registrar Abuse Contact Email: [email protected]
   Registrar Abuse Contact Phone: +1.6503198930
   Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
   Name Server: SANDRA.NS.CLOUDFLARE.COM
   Name Server: TIM.NS.CLOUDFLARE.COM
   DNSSEC: unsigned
   URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/
>>> Last update of whois database: 2025-11-11T21:06:45Z <<<

For more information on Whois status codes, please visit https://icann.org/epp

NOTICE: The expiration date displayed in this record is the date the
registrar's sponsorship of the domain name registration in the registry is
currently set to expire. This date does not necessarily reflect the expiration
date of the domain name registrant's agreement with the sponsoring
registrar.  Users may consult the sponsoring registrar's Whois database to
view the registrar's reported date of expiration for this registration.

TERMS OF USE: You are not authorized to access or query our Whois
database through the use of electronic processes that are high-volume and
automated except as reasonably necessary to register domain names or
modify existing registrations; the Data in VeriSign Global Registry
Services' ("VeriSign") Whois database is provided by VeriSign for
information purposes only, and to assist persons in obtaining information
about or related to a domain name registration record. VeriSign does not
guarantee its accuracy. By submitting a Whois query, you agree to abide
by the following terms of use: You agree that you may use this Data only
for lawful purposes and that under no circumstances will you use this Data
to: (1) allow, enable, or otherwise support the transmission of mass
unsolicited, commercial advertising or solicitations via e-mail, telephone,
or facsimile; or (2) enable high volume, automated, electronic processes
that apply to VeriSign (or its computer systems). The compilation,
repackaging, dissemination or other use of this Data is expressly
prohibited without the prior written consent of VeriSign. You agree not to
use electronic processes that are automated and high-volume to access or
query the Whois database except as reasonably necessary to register
domain names or modify existing registrations. VeriSign reserves the right
to restrict your access to the Whois database in its sole discretion to ensure
operational stability.  VeriSign may restrict or terminate your access to the
Whois database for failure to abide by these terms of use. VeriSign
reserves the right to modify these terms at any time.

The Registry database contains ONLY .COM, .NET, .EDU domains and
Registrars.

DNS Configuration

Domain Name System records and email security configuration

Email Security

SPF

DKIM

DMARC

Basic

AAAA

TXT

                                                            aspmx.l.google.com
                                                        

                                                            alt1.aspmx.l.google.com
                                                        

                                                            alt2.aspmx.l.google.com
                                                        

                                                            alt3.aspmx.l.google.com
                                                        

                                                            alt4.aspmx.l.google.com
                                                        

HTTP Headers

Key server response headers for security analysis.

Security (1)

HSTS

Web Server

                                            cloudflare
                                        

Technology

                                            Next.js
                                        

Cache Policy

                                            public, max-age=300
                                        

Cloudflare Ray ID

                                            99d0c1a4ac02e5e0-AMS
                                        

CDN Cache

HIT

{
    "date": "Tue, 11 Nov 2025 21:06:57 GMT",
    "content-type": "text\/html; charset=utf-8",
    "content-length": "167",
    "location": "https:\/\/www.heygen.com\/",
    "cache-control": "public, max-age=300",
    "expires": "Tue, 11 Nov 2025 21:11:57 GMT",
    "vary": "rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding",
    "speculation-rules": "\"\/cdn-cgi\/speculation\"",
    "server": "cloudflare",
    "cf-ray": "99d0c1a4ac02e5e0-AMS",
    "alt-svc": "h3=\":443\"; ma=86400",
    "content-encoding": "gzip",
    "cf-cache-status": "HIT",
    "age": "500",
    "set-cookie": "__cf_bm=nn2yOpjqgy99fchdhnSVOzRyLDt6It0O6D9lR8l4kqk-1762895217-1.0.1.1-cwVYh4mAAFbNMl91Ud6zIyVZOMlfu6_SrQTFBhvEObRQr6t3BrHm6YbASQte8_oZy6pet4xxH5Ie7YhJZhDTNBljeFxCWN_BPepsy1PWrGs; path=\/; expires=Tue, 11-Nov-25 21:36:57 GMT; domain=.heygen.com; HttpOnly; Secure; SameSite=None",
    "strict-transport-security": "max-age=63072000",
    "x-matched-path": "\/[locale]",
    "x-next-i18n-router-locale": "en-us",
    "x-nextjs-prerender": "1",
    "x-nextjs-stale-time": "300",
    "x-powered-by": "Next.js",
    "x-vercel-cache": "HIT",
    "x-vercel-id": "cdg1::iad1::h8r7s-1762894607063-e5fb4862b3e4"
}

IP Geolocation

Server location and network information

United States

Newark

IP Address

104.18.9.242

ISP / Hosting

Cloudflare, Inc.

Coordinates

40.7357, -74.1724

Country Code

View on Google Maps

Email Configuration

Email security and authentication records (SPF, DKIM, DMARC).

SPF Record

v=spf1 include:_spf.google.com ~all

DKIM

Configured

DMARC

v=DMARC1; p=reject; pct=100; fo=0; rua=mailto:dmarc-reports@...

Performance Metrics

Website loading speed and performance analysis

Average

Load Time

0.11s

Excellent

Page Size

0.24MB

Optimized

Requests

178

Many

Overall

85/100

Performance score

Good performance, but there's room for optimization to improve loading speed.

Blacklist Check

Checking if this domain is listed on major security blacklists.

Google Safe Browsing

Safe

Discovered Subdomains

Publicly accessible subdomains associated with this domain.

www.heygen.com

api.heygen.com

dev.heygen.com

staging.heygen.com

app.heygen.com

m.heygen.com

support.heygen.com

help.heygen.com

Privacy & Trackers

1 Trackers Found

Google Tag Manager

General

These trackers may be used for analytics, advertising, or site functionality.

Website Screenshot

In-Depth Analysis

Overview

HeyGen.com is an AI video generation platform that allows users to create videos from text, images, or audio inputs. It offers features such as narration, captions, visuals, and animations to produce complete video content.

Security Assessment

HeyGen.com exhibits a strong security posture. It uses a valid SSL certificate issued by Google Trust Services, ensuring encrypted communication. The domain is relatively old (10 years), suggesting stability and legitimacy. Importantly, Google Safe Browsing flags the site as clean, indicating no detected malware or phishing threats. The registrar and hosting are managed by Cloudflare, a reputable provider known for its security services.

Trust Level

With a FlareScore of 92/100, HeyGen.com presents a low risk to users. The high score reflects the site's secure configuration, clean reputation, and use of trusted providers.

Recommendations

While HeyGen.com appears safe, users should still practice caution.

Review the privacy policy to understand data usage.
Be mindful of the single tracker present.
Use strong, unique passwords for your HeyGen account.
Report any suspicious activity to HeyGen support immediately.

User Reviews and Complaints

Share your experience with this site or ask questions. Your comments help the community.

Sign in to Share Your Experience

Join our community to leave reviews and help others make informed decisions.

No reviews yet.

Is This Your Website?

Claim your profile to respond to reviews and build trust with your audience.