yotpo.com

HTML metadata

Title: Yotpo: Loyalty, Reviews & AI Visibility For Ecommerce
Description: Drive eCommerce growth with Yotpo. Build loyalty programs, collect reviews, and boost AI visibility to get found, earn trust, and turn shoppers into advocates.
Language: en-US
Generator: WPML ver:4.9.2.1 stt:9,12,37,1,4,3,13,23,27,38,40,41,44,45,2,50,53;
Canonical: https://www.yotpo.com/

Open Graph

url: https://www.yotpo.com/
title: Yotpo: Loyalty, Reviews & AI Visibility For Ecommerce
locale: en_US
site name: Yotpo
description: Drive eCommerce growth with Yotpo. Build loyalty programs, collect reviews, and boost AI visibility to get found, earn trust, and turn shoppers into advocates.
updated time: 2026-04-16T12:49:26+00:00

Technology

CDN: Amazon CloudFront
Server: nginx
CMS: WordPress

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (11)

js-eu1.hsforms.net×4
cdn.cookiehub.eu×2
cdn.dynamicyield.com×2
cdn.jsdelivr.net×2
cdnjs.cloudflare.com×2
fonts.googleapis.com×2
fast.wistia.com×1
fonts.gstatic.com×1
js.chilipiper.com×1
opps-widget.getwarmly.com×1
www.googletagmanager.com×1

Social

Registration

Registrar

GoDaddy.com, LLC

Created

2010-08-30

Expires

2028-03-15 666 days left

Updated

2026-03-16

Name servers

ns-1194.awsdns-21.org
ns-1974.awsdns-54.co.uk
ns-78.awsdns-09.com
ns-871.awsdns-44.net

DNS records live

NS

ns-1194.awsdns-21.org
ns-1974.awsdns-54.co.uk
ns-78.awsdns-09.com
ns-871.awsdns-44.net

MX

10 aspmx.l.google.com
20 alt1.aspmx.l.google.com
30 alt2.aspmx.l.google.com
40 aspmx2.googlemail.com
50 aspmx3.googlemail.com

TXT

Show 26 TXT records

985a464e-dc4f-4f5f-8713-4a96cb93d71d
zapier-domain-verification-challenge=f09f8f5a-9fc0-425f-b746-a54636a7ed0d
wiz-domain-verification=b23a6ac86de7e67fbf0f7e592fea9d8b263e75e20606df4aa69054759eabf7fb
google-site-verification=fPOajLzuFVVB2QOj5555qDjeSCgX6Pyse07tbXsRCvA
cursor-domain-verification-t7mefj=lfAWIlXkQ53xZOoHCBGMIwtVa
_xiyhwq7x3qf1zzhfv23znqsgrxkl32a
apple-domain-verification=UazT3Oc6Fxhku75C
qtl6lrpfvrm9c7xrc0m7gp31rd1bpc2y
3a2de428-7c9b-41bb-865b-74ee1a166b8a
google-site-verification=iojWx8P0exndxlOGVpU8dWi-WDf0xwQXOmi5320eSjU
google-site-verification=oV8AWT0BynxD9TvJqLjOUa8twjitOsa9tOQHAlYd6yA
hubspot-developer-verification=ZGQ5MGFkNTMtYmIwNy00YjljLWI1M2ItOGNlYjUxYTE1MDE2
hubspot-domain-verification=N2Y3MTA1NDktOWVhMy00MDA5LWIzMjYtMGJlZTkxMmRhYTc1
netlify-challenge=d299db1f7cee52ddf738b8477ad2c5f5
ca3-9ddab2284e294f6f95fa024113fe3a4d
google-site-verification=iAFYe1GbUMlxahjq41Ftz6tUG4ZDHi_3aulRKAQv1dA
uber-domain-verification=ebd78c22-4522-4723-847f-10da05b0b253
google-site-verification=Do88VapqnBP86h_bh5MkJ-Kg276XNwKXo434AmP-D4Q
google-site-verification=YQzxwQtQ0C-ZPp4V2WuluesqCMYEpEdFhT7qnsk6IFo
CWmQOJaUirYXvsu1LaOT3WUQ4Q
google-site-verification=7KhaAoE5C_dqs-bdDNkoeEuKukeftsDQTnDPTOikTUY
zapier-domain-verification-challenge=35da2d10-6ef1-47a7-87b0-6e1b675c3fe3
onetrust-domain-verification=4d84333c6283488891c4c5ec5fcc6a56
status-page-domain-verification=n1117sfb3s71
atlassian-domain-verification=WE065/ZSpKgS7LCGTv3M9CeWSaKl1AkldBGeawYYW9bPvmDtV1mpEHfkr/FUY55O
google-site-verification=vJzZgvq8_t9IA7PE7dEHkm1BkQcv3eBiVJtgvjtqQm0

Email authentication strong

SPF

v=spf1 include:_spf.google.com ip4:198.37.158.177 include:_spf.salesforce.com include:customeriomail.com include:25670362.spf08.hubspotemail.net ip4:23.21.109.197 ip4:23.21.109.212 ip4:147.160.167.0/26 ~all

softfail (~all)

DMARC

v=DMARC1;p=quarantine;sp=none;pct=100;rua=mailto:dmarc-report@yotpo.com,mailto:dmarc@j89q4a6w.uriports.com;ruf=mailto:dmarc-report@yotpo.com,mailto:dmarc@j89q4a6w.uriports.com;fo=1;

policy: quarantine · sp=none

DKIM

Show 6 DKIM selectors

google: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCnF90wONESTYUjnX5QXWu1LdQ/OMTNO0DfllpPokhqIGEDMuNCzgyvUc5LlAFh8XcuPXyN3ihXM4l6SXN7fL…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
dkim: v=DKIM1;k=rsa;p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2gAtnNzEfzNxLKMcfPJuuFoocS/mMTkSMoCz0ClygNC7Ojqc3aXw1GW+NAIGO9M62EX+lfWTt+/4Eks…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4w6eQpkTmhsfp38/LSv37t/lCm7DK+x1LBf6X74IYaKDfsPXRCQysrPmyEt9tOGZi9lPCNN3n+B1uUM4jF…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AVEC4/+vILMoJ54zYflkyJa9RtDOOyXXYE0PVzZL+X48Pj31eXkRWfpLd+jqh1sYAz3xdrcc6XrKmxfKr…
smtpapi: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDPtW5iwpXVPiH5FzJ7Nrl8USzuY9zqqzjE0D1r04xDN6qwziDnmgcFNNfMewVKN2D1O+2J9N14hRprzByFwfQW76…

selectors probed

Certificate (current)

Amazon RSA 2048 M03

from 2025-08-09 to 2026-09-08

Expires in 112 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 70/100 Checked live page: https://www.yotpo.com/

present

strict-transport-security
content-security-policy
referrer-policy

findings

CSP uses wildcard sources
missing frame protection
missing content type protection
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
content-security-policy: frame-ancestors 'self' https://yotpo--uat.sandbox.my.site.com https://partners.yotpo.com https://www.yotpo.com https://*.paperflite.com https://content.yotpo.com https://yotpo.app.workramp.com https://*.gtmbuddy.io
strict-transport-security: max-age=31536000; includeSubDomains; preload