Score Breakdown

How we calculated the Flare Score based on positive and negative signals.

Positive Signals

Valid SSL certificate from Google Trust Services

Established domain (6+ years old)

WHOIS information publicly available

Registered with reputable registrar (GoDaddy.com, LLC)

Not found on any blacklist (1 sources checked)

Strong email security (SPF, DKIM, DMARC configured)

Privacy policy present

Modern security headers configured (HSTS, CSP)

Good website performance

Active social media presence

Contact information available

Built with Shopify (established platform)

Uses CDN for better performance and security

Negative Signals

Pro Tip: A valid SSL certificate is a basic requirement for any trustworthy site, but it doesn't guarantee the site is not a scam.

SSL & Security

SSL certificate and security headers configuration

Security Score

100/100

✓ Valid SSL (40) ✓ HSTS (20) ✓ CSP (20) ✓ X-Frame (20)

SSL Certificate

Issuer

Google Trust Services

Valid From

Jan 24, 2026

Valid Until

Apr 24, 2026

50 days remaining

Security Headers

HSTS

CSP

X-Frame-Options

How Was This Calculated?

Transparency into our FlareScore™ methodology and data sources used for this analysis.

hilltoppacks.com Analysis

FlareScore™: 93/100 (Safe Risk)

Our analysis of hilltoppacks.com identified 13 positive security indicators and 0 potential concerns. The FlareScore™ rating combines technical security measures, domain reputation, and content analysis.

SSL Certificate Analysis

Domain Age: 6 years 6 months

AI Content Review

17 DNS Records

Analysis Sources

• WHOIS: GoDaddy.com, LLC
• SSL: Google Trust Services
• DNS: 17 records analyzed
• Content: Visual & text analysis

Last Checked

Feb 02, 2026
1 month ago

Transparency Note: Our analysis is based on publicly available data and automated scanning. For detailed methodology and accuracy metrics, visit our methodology page.

Domain & WHOIS Information

Domain Age

6 years 6 months

Registered Aug 20, 2019

Very High Trust

Aug 2019 Expires Aug 2029

Established domain (5+ years) - High trust indicator

Registrar

GoDaddy.com

Registration Date

Aug 20, 2019 (6 years ago)

Last Updated

Aug 21, 2024

Expiration Date

Aug 20, 2029 (1265 days remaining)

Server Location

Canada

Abuse Contact

[email protected]

480-624-2505

   Domain Name: HILLTOPPACKS.COM
   Registry Domain ID: 2425363209_DOMAIN_COM-VRSN
   Registrar WHOIS Server: whois.godaddy.com
   Registrar URL: http://www.godaddy.com
   Updated Date: 2024-08-21T14:19:51Z
   Creation Date: 2019-08-20T22:26:26Z
   Registry Expiry Date: 2029-08-20T22:26:26Z
   Registrar: GoDaddy.com, LLC
   Registrar IANA ID: 146
   Registrar Abuse Contact Email: [email protected]
   Registrar Abuse Contact Phone: 480-624-2505
   Domain Status: clientDeleteProhibited https://icann.org/epp#clientDeleteProhibited
   Domain Status: clientRenewProhibited https://icann.org/epp#clientRenewProhibited
   Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
   Domain Status: clientUpdateProhibited https://icann.org/epp#clientUpdateProhibited
   Name Server: NS57.DOMAINCONTROL.COM
   Name Server: NS58.DOMAINCONTROL.COM
   DNSSEC: unsigned
   URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/
>>> Last update of whois database: 2026-02-02T21:16:45Z <<<

For more information on Whois status codes, please visit https://icann.org/epp

NOTICE: The expiration date displayed in this record is the date the
registrar's sponsorship of the domain name registration in the registry is
currently set to expire. This date does not necessarily reflect the expiration
date of the domain name registrant's agreement with the sponsoring
registrar.  Users may consult the sponsoring registrar's Whois database to
view the registrar's reported date of expiration for this registration.

TERMS OF USE: You are not authorized to access or query our Whois
database through the use of electronic processes that are high-volume and
automated except as reasonably necessary to register domain names or
modify existing registrations; the Data in VeriSign Global Registry
Services' ("VeriSign") Whois database is provided by VeriSign for
information purposes only, and to assist persons in obtaining information
about or related to a domain name registration record. VeriSign does not
guarantee its accuracy. By submitting a Whois query, you agree to abide
by the following terms of use: You agree that you may use this Data only
for lawful purposes and that under no circumstances will you use this Data
to: (1) allow, enable, or otherwise support the transmission of mass
unsolicited, commercial advertising or solicitations via e-mail, telephone,
or facsimile; or (2) enable high volume, automated, electronic processes
that apply to VeriSign (or its computer systems). The compilation,
repackaging, dissemination or other use of this Data is expressly
prohibited without the prior written consent of VeriSign. You agree not to
use electronic processes that are automated and high-volume to access or
query the Whois database except as reasonably necessary to register
domain names or modify existing registrations. VeriSign reserves the right
to restrict your access to the Whois database in its sole discretion to ensure
operational stability.  VeriSign may restrict or terminate your access to the
Whois database for failure to abide by these terms of use. VeriSign
reserves the right to modify these terms at any time.

The Registry database contains ONLY .COM, .NET, .EDU domains and
Registrars.

DNS Configuration

Domain Name System records and email security configuration

Email Security

SPF

DKIM

DMARC

Basic

1

A

5

MX

8

TXT

2

NS

1

                                                            aspmx.l.google.com
                                                        

5

                                                            alt1.aspmx.l.google.com
                                                        

5

                                                            alt2.aspmx.l.google.com
                                                        

10

                                                            alt3.aspmx.l.google.com
                                                        

10

                                                            alt4.aspmx.l.google.com
                                                        

                                                            v=spf1 include:_spf.google.com include:shops.shopify.com include:spf.gorgias.com ~all
                                                        

SPF

                                                            facebook-domain-verification=hn7sdbqac7tb7vlgq1ux96ubcq5b5p
                                                        

                                                            amazonses:rxMME4pMLv2ExN2Y3DWIQCP5Rzo9CfWIV0wIW6VfvAM=
                                                        

                                                            google-site-verification=wNP_OMNESINnw3hZXHANrvBNicFWsQhglhn0mBpXZw0
                                                        

                                                            klaviyo-site-verification=UcPpwm
                                                        

                                                            pinterest-site-verification=68cc92118eb04661d5620a9920169c4b
                                                        

                                                            google-site-verification=F-zzHxvwGYG-cxbJgD_aV0EVwc-mtlNQIeQdSfdVlaA
                                                        

                                                            google-site-verification=xIsJzNY9EYKjUVPFv9-DSTbKJyZdmM7SUx91ZeLHeXQ
                                                        

HTTP Headers

Key server response headers for security analysis.

Security (5)

Clickjacking Protection

Content Security Policy

HSTS

XSS Filter

MIME Sniffing Protection

Web Server

                                            cloudflare
                                        

CDN Cache

                                            DYNAMIC
                                        

Cloudflare Ray ID

                                            9c7cb6914a009eba-CDG
                                        

{
    "link": "<https:\/\/cdn.shopify.com>; rel=\"preconnect\", <https:\/\/cdn.shopify.com>; rel=\"preconnect\"; crossorigin, <\/\/hilltoppacks.com\/cdn\/shop\/t\/76\/assets\/vendor.min.js?v=103990831484246365421767412935>; as=\"script\"; rel=\"preload\", <\/\/hilltoppacks.com\/cdn\/shop\/t\/76\/assets\/app.js?v=65769988580183007921767412909>; as=\"script\"; rel=\"preload\", <\/\/hilltoppacks.com\/cdn\/shop\/t\/76\/assets\/slideshow.js?v=110104780531747616791767412932>; as=\"script\"; rel=\"preload\"",
    "date": "Mon, 02 Feb 2026 21:17:04 GMT",
    "content-type": "text\/html; charset=utf-8",
    "content-encoding": "gzip",
    "x-sorting-hat-shopid": "52896137401",
    "set-cookie": "_shopify_essential=:AZwgN1cCAAEANXsOajSgiiRFgw8AR02ZP1DlpO9LfN3D_hiWt0ZZeGHQnhnX1-SshROZx3-kn6KRhjrD9acvwJwX_BaS4Ux40h-xu_V-X7ZgNGJdHF1QQ0W7DMz3BFowBvKcBTdILVHODKk_6426YEfemZShDqpMldf9OpfA3ex7gQoNxI2TS7DA9-1Bqvt-aVAI0Zyovf8m3VtyjWJv4Q4lBOE4ZU2F-nZxNgbz1ue50-3vWsnMmBOYPvAgV8My778yD7hPGXsHpPkqU6nCGCG-rm0b_rf1zDZ06_I1-x4vwR5n1GGNVPY7PAtUJMcBLrMa3TqxgoyzcczW:; Max-Age=31536000; Path=\/; HttpOnly; Secure; Priority=High; SameSite=Lax",
    "speculation-rules": "\"\/cdn\/shopifycloud\/storefront\/assets\/storefront\/storefronts.specrules-dd5621a1.json\"",
    "etag": "W\/\"page_cache:52896137401:IndexController:1634b985ef4a039f46eed304891ab3ac\"",
    "shopify-complexity-score": "4810",
    "x-frame-options": "DENY",
    "content-security-policy": "block-all-mixed-content; frame-ancestors 'none'; upgrade-insecure-requests;",
    "strict-transport-security": "max-age=7889238",
    "x-shopid": "52896137401",
    "vary": "accept-encoding",
    "alt-svc": "h3=\":443\"; ma=86400",
    "content-language": "en-US",
    "powered-by": "Shopify",
    "server-timing": "cfRequestDuration;dur=532.000065, earlyhints",
    "x-dc": "gcp-europe-west1,gcp-europe-west1,gcp-europe-west1",
    "x-request-id": "5f5fc314-42e2-4351-825b-5409f6e82b91-1770067023",
    "cf-cache-status": "DYNAMIC",
    "report-to": "{\"endpoints\":[{\"url\":\"https:\\\/\\\/a.nel.cloudflare.com\\\/report\\\/v4?s=H0EPB2grbAmHRF%2BT%2F%2BeM3L60e4%2B8LpJagvYmkkaX2G%2BlcsMqyg4QSEHqFCNz2kXziQpENUXmcNbW5g56nXoZpGib7OOAdvV2vsqvtDT6GovpkFa9ehHIVHjwinx5iU1cFYE%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}",
    "nel": "{\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}",
    "x-xss-protection": "1; mode=block",
    "x-content-type-options": "nosniff",
    "x-permitted-cross-domain-policies": "none",
    "x-download-options": "noopen",
    "server": "cloudflare",
    "cf-ray": "9c7cb6914a009eba-CDG"
}

IP Geolocation

Server location and network information

Canada

Ottawa

IP Address

23.227.38.32

ISP / Hosting

Cloudflare, Inc.

Coordinates

45.4153, -75.6894

Country Code

CA

View on Google Maps

Email Configuration

Email security and authentication records (SPF, DKIM, DMARC).

SPF Record

v=spf1 include:_spf.google.com include:shops.shopify.com inc...

DKIM

Configured

DMARC

v=DMARC1; p=reject; pct=100; rua=mailto:re+xaohlzg8end@dmarc...

Performance Metrics

Website loading speed and performance analysis

85

Average

Load Time

0.14s

Excellent

Page Size

0.37MB

Optimized

Requests

191

Many

Overall

85/100

Performance score

Good performance, but there's room for optimization to improve loading speed.

Blacklist Check

Checking if this domain is listed on major security blacklists.

Google Safe Browsing

Safe

Discovered Subdomains

Publicly accessible subdomains associated with this domain.

www.hilltoppacks.com

Privacy & Trackers

0 Trackers Found

Privacy Policy

Website Screenshot

In-Depth Analysis

Overview

Hilltoppacks.com is an e-commerce website specializing in ultralight backpacking gear and custom hiking equipment, including backpacks, bear bags, and dry bags. They offer free shipping on orders over $100.

Security Assessment

The website possesses a strong security foundation. A valid SSL certificate issued by Google Trust Services ensures encrypted communication, protecting user data during transmission. The domain's age (6 years and 5 months) suggests stability and legitimacy. Crucially, Google Safe Browsing reports a clean status, indicating no detected threats and providing a positive trust signal. The use of Cloudflare as an ISP also contributes to security through its DDoS protection and content delivery network.

Trust Level

With a FlareScore of 93/100, Hilltoppacks.com presents a low-risk profile. The high score reflects the positive security indicators like valid SSL, clean Google Safe Browsing status, and domain age.

Recommendations

While the website appears secure, users should still practice safe online shopping habits. Always verify the website address in your browser. Review the privacy policy to understand data handling practices. Use strong, unique passwords for your account and enable two-factor authentication if available. Although the risk is low, staying vigilant is always recommended.

User Reviews and Complaints

Share your experience with this site or ask questions. Your comments help the community.

Sign in to Share Your Experience

Join our community to leave reviews and help others make informed decisions.

Sign In Create Account

No reviews yet.

Analysis for

hilltoppacks.com

FlareAI™ Summary