Analysis for

heypopi.co

Flare Score

Warning

FlareAI™ Summary

Heypopi.co, a Shopify-based e-commerce site, uses a valid SSL certificate for secure connections. Hosted in Canada, it likely offers products or services requiring payment processing and user accounts. The FlareScore of 64/100 indicates a moderate risk level. Blacklist status is unverified, requiring caution. Users should exercise standard online safety practices when interacting with this site, especially when providing personal or financial information, due to the warning-level risk score.

-10.9%

than category average

Canada

Server Country

Unknown

Domain Age

Score Breakdown

How we calculated the Flare Score based on positive and negative signals.

Positive Signals

Valid SSL certificate from Google Trust Services

Modern security headers configured (HSTS, CSP)

Good website performance

Built with Shopify (established platform)

Uses CDN for better performance and security

Negative Signals

Very new domain (less than 3 months old)

Weak or missing email security configuration

Pro Tip: A valid SSL certificate is a basic requirement for any trustworthy site, but it doesn't guarantee the site is not a scam.

SSL & Security

SSL certificate and security headers configuration

Security Score

100/100

✓ Valid SSL (40) ✓ HSTS (20) ✓ CSP (20) ✓ X-Frame (20)

SSL Certificate

Issuer

Google Trust Services

Valid From

Jan 10, 2026

Valid Until

Apr 10, 2026

34 days remaining

Security Headers

HSTS

CSP

X-Frame-Options

How Was This Calculated?

Transparency into our FlareScore™ methodology and data sources used for this analysis.

heypopi.co Analysis

FlareScore™: 64/100 (Warning Risk)

Our analysis of heypopi.co identified 5 positive security indicators and 2 potential concerns. The FlareScore™ rating combines technical security measures, domain reputation, and content analysis.

SSL Certificate Analysis

AI Content Review

9 DNS Records

Analysis Sources

• SSL: Google Trust Services
• DNS: 9 records analyzed
• Content: Visual & text analysis

Last Checked

Jan 16, 2026
1 month ago

Transparency Note: Our analysis is based on publicly available data and automated scanning. For detailed methodology and accuracy metrics, visit our methodology page.

DNS Configuration

Domain Name System records and email security configuration

Email Security

SPF

DKIM

DMARC

None

AAAA

TXT

                                                            ns-cloud-d4.googledomains.com
                                                        

                                                            ns-cloud-d3.googledomains.com
                                                        

                                                            ns-cloud-d1.googledomains.com
                                                        

                                                            ns-cloud-d2.googledomains.com
                                                        

HTTP Headers

Key server response headers for security analysis.

Security (5)

Clickjacking Protection

Content Security Policy

HSTS

XSS Filter

MIME Sniffing Protection

Web Server

                                            cloudflare
                                        

CDN Cache

                                            DYNAMIC
                                        

Cloudflare Ray ID

                                            9beeea414c69662b-AMS
                                        

{
    "link": "<https:\/\/cdn.shopify.com>; rel=\"preconnect\", <https:\/\/cdn.shopify.com>; rel=\"preconnect\"; crossorigin, <\/\/heypopi.co\/cdn\/shop\/t\/2\/assets\/base.css?v=72514207947921368001767434125>; as=\"style\"; rel=\"preload\"",
    "date": "Fri, 16 Jan 2026 16:16:03 GMT",
    "content-type": "text\/html; charset=utf-8",
    "content-encoding": "gzip",
    "x-sorting-hat-podid": "77",
    "x-sorting-hat-shopid": "67072589902",
    "set-cookie": "_shopify_analytics=:AZvHl6XlAAEAGjb8WUuigZZBXImQY73hOvlweth264GjaMrwKrNGuIvSAU37FvXUmr64Xaw:; Max-Age=31536000; Path=\/; HttpOnly; Secure; Priority=High; SameSite=Lax",
    "speculation-rules": "\"\/cdn\/shopifycloud\/storefront\/assets\/storefront\/storefronts.specrules-dd5621a1.json\"",
    "etag": "W\/\"page_cache:67072589902:IndexController:d59db1348fff094e48f123d7572cee0c\"",
    "shopify-complexity-score": "2390",
    "x-frame-options": "DENY",
    "content-security-policy": "block-all-mixed-content; frame-ancestors 'none'; upgrade-insecure-requests;",
    "strict-transport-security": "max-age=7889238",
    "x-shopid": "67072589902",
    "x-shardid": "77",
    "vary": "accept-encoding",
    "alt-svc": "h3=\":443\"; ma=86400",
    "content-language": "en-US",
    "powered-by": "Shopify",
    "server-timing": "cfRequestDuration;dur=292.000055, earlyhints",
    "x-dc": "gcp-europe-west4,gcp-europe-west1,gcp-europe-west1",
    "x-request-id": "bd56a9f9-d9c4-4b2c-99d0-4b89a261e533-1768580162",
    "cf-cache-status": "DYNAMIC",
    "report-to": "{\"endpoints\":[{\"url\":\"https:\\\/\\\/a.nel.cloudflare.com\\\/report\\\/v4?s=kg4iDGrfoVIcZH2xafXQHLVxC9DJ6vQ%2FVO77pjQBpEDXK4%2FkD05jsu84FlyhTQ54mkd52iD2U76URCoyiJiLYlvAX3AZn8%2Ff6RJjU%2FdzMekhW%2BWAKVceyE%2Fu22c%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}",
    "nel": "{\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}",
    "x-xss-protection": "1; mode=block",
    "x-content-type-options": "nosniff",
    "x-permitted-cross-domain-policies": "none",
    "x-download-options": "noopen",
    "server": "cloudflare",
    "cf-ray": "9beeea414c69662b-AMS"
}

IP Geolocation

Server location and network information

Canada

Ottawa

IP Address

23.227.38.68

ISP / Hosting

Cloudflare, Inc.

Coordinates

45.4153, -75.6894

Country Code

View on Google Maps

Performance Metrics

Website loading speed and performance analysis

Average

Load Time

0.16s

Excellent

Page Size

0.23MB

Optimized

Requests

111

Many

Overall

85/100

Performance score

Good performance, but there's room for optimization to improve loading speed.

Blacklist Check

Checking if this domain is listed on major security blacklists.

No blacklist data available yet. Website analysis may be in progress.

Discovered Subdomains

Publicly accessible subdomains associated with this domain.

www.heypopi.co

Website Screenshot

In-Depth Analysis

Here's a cybersecurity analysis of heypopi.co:

Overview

Heypopi.co, titled "HEYPOPI," appears to be an e-commerce website built on Shopify, offering login and payment functionalities.

Security Assessment

The website utilizes a valid SSL certificate issued by Google Trust Services, expiring in 2026, indicating encrypted communication. The hosting infrastructure relies on Cloudflare in Canada, suggesting potential DDoS protection. However, Google Safe Browsing verification is unavailable, creating uncertainty.

Trust Level

The FlareScore of 64/100 (Warning) indicates a moderate risk level. While the SSL certificate is a positive sign, the lack of a privacy policy and the unavailable Google Safe Browsing status contribute to the lower score. The absence of trackers is a small positive, but the negatives outweigh it.

Recommendations

Exercise caution when using heypopi.co. Given the missing privacy policy, avoid sharing sensitive personal information beyond what's absolutely necessary for transactions. The lack of Google Safe Browsing verification means potential malware risks cannot be ruled out. Consider alternative vendors with higher trust scores and transparent privacy practices.

User Reviews and Complaints

Share your experience with this site or ask questions. Your comments help the community.

Sign in to Share Your Experience

Join our community to leave reviews and help others make informed decisions.

No reviews yet.