firebox.com

.com crawl

First seen 2026-05-27 · Last seen 2026-05-30 · ok HTTP/1.1 200 251 ms crawled 2026-05-30

US · 172.67.73.66 · AS13335 Cloudflare, Inc.

Reputation 89/100 weak security headers dmarc monitor-only

Classifying

HTML metadata

Title

FIREBOX® | Shop Original Presents Online

Description

Discover unique, personalised, and downright brilliant gifts for everyone. From hilarious gadgets to heartfelt keepsakes – Firebox has it all. ?

Language

Canonical

https://firebox.com/

Translations

de ×3
en ×3
fr ×3
nl ×2
da
es
it

Technology

CDN: Cloudflare
CMS: Gatsby

Analytics

Cloudflare Insights
Google Tag Manager

Third-party hosts loaded (16)

upsidedown.radbag.at×8
www.radbag.at×6
firebox.es×1
firebox.eu×1
static.cloudflareinsights.com×1
widget.reviews.co.uk×1
www.cadeauxfolies.be×1
www.cadeauxfolies.ch×1
www.cadeauxfolies.fr×1
www.googletagmanager.com×1
www.radbag.be×1
www.radbag.ch×1
www.radbag.de×1
www.radbag.dk×1
www.radbag.nl×1
www.troppotogo.it×1

Social

Registration

Registrar

Gandi SAS

Created

1997-03-20

Expires

2027-03-21 293 days left

Updated

2026-02-04

Name servers

nola.ns.cloudflare.com
pete.ns.cloudflare.com

DNS records live

NS

nola.ns.cloudflare.com
pete.ns.cloudflare.com

MX

1 aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

klaviyo-site-verification=YvAsL2

Verified for

Atlassian
Google

Email authentication partial

SPF

v=spf1 include:_spf.google.com ~all

softfail (~all)

DMARC

v=DMARC1; p=none; rua=mailto:dmarc-reports@firebox.com;

policy: none (monitoring only)

DKIM

google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTRSIlLb4mDEehzu5U24KOVY1vwrWqxa8Ev8r/gilsBEpXYNascTXue8ZlcJ+rgvA9JWhHSOuR9tOk…
k1: k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC5T2IyPOlLXRBdKVBxQQLl7jrzH0OHzSqFtHb97DN8aEC+MI3FUTEkNcrAUcp1uR+44kUHUOFmfwu8Z8CZrL/eNt5nAtsb…

selectors probed

Certificate (current)

WE1

from 2026-05-04 to 2026-08-02

Expires in 63 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 45/100 Checked live page: https://firebox.com/

present

x-frame-options
x-content-type-options

findings

missing HSTS
missing Content Security Policy
weak frame protection
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN, SAMEORIGIN
x-content-type-options: nosniff