No Security Risks Detected
This domain appears to be safe and secure
100%
Score
Disclaimer: This assessment is based on automated analysis of publicly available information. Results are for informational purposes only. For critical applications, consult security professionals.
Scan Information
Last checked:August 5, 2025 17:19:03
Target URL:https://grabagun.com
Scan Complete
Refresh page after 10 minutes
for updated results
Page Information
Target URL
https://grabagun.com
Page Title
GrabAGun | Guns for Sale | Lowest Priced Online Gun Dealer
Site FaviconStatus
Active
Host Information
Domain
grabagun.com
Server
cloudflare
Country
United States
IP Address
172.66.161.70
ASN Information
13335
CLOUDFLARENET
Technologies
RequireJS
JavaScript frameworks
Platform.sh
PaaS
PayPal
Payment processors
authorize.net
Payment processors
Zendesk
Documentation
UserWay
Accessibility
+9 more technologies detected
SSL Certificate
HTTPS Enabled
Secure
Certificate Issuer
N/A
Valid From
2025-08-04 17:19:07
Valid Until
2026-08-05 17:19:07
Subject Name
grabagun.com
Performance Statistics
92
Total Requests
31
Domains
28
IP Addresses
4.75 MB
Transfer Size
Content Size11.84 MB
HTTP Headers
Age
458
CF-Cache-Status
HIT
CF-RAY
96a7f529bb96cfa2-PDX
Cache-Control
max-age=0, no-store, must-revalidate
Connection
keep-alive
Content-Encoding
br
Content-Type
text/html; charset=UTF-8
Date
Tue, 05 Aug 2025 17:19:07 GMT
Last-Modified
Tue, 05 Aug 2025 17:11:29 GMT
Server
cloudflare
Server-Timing
cfCacheStatus;desc="HIT"
cfOrigin;dur=0,cfEdge;dur=39
Transfer-Encoding
chunked
content-security-policy
object-src self 'self' 'unsafe-inline'; media-src *.adobe.com self https://static.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; upgrade-insecure-requests; frame-ancestors 'self' https://www.google.com/ *.credova.com self https://*.grabagun.com https://*.credova.com https://*.authorize.net *.authorize.net *.publicsquare.com 'self'; form-action 'self' geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com self https://*.authorize.net *.authorize.net *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://plumrocket.com *.facebook.com 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/ https://widgets.turnto.com/ https://optimize.google.com https://fonts.googleapis.com https://web-sdk.aptrinsic.com/ http://cdn.avmws.com/ https://cdn.listrakbi.com/ https://cdn.userway.org/ *.adobe.com https://tagmanager.google.com https://d22q3dafggn5rg.cloudfront.net https://www.google.com https://www.google.pl https://www.google.com.ua https://www.google.ca *.turnto.com unsafe-inline assets.braintreegateway.com *.tagmanager.google.com *.googletagmanager.com fonts.googleapis.com 'self' 'unsafe-inline'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://cdns.brsrvr.com/ https://cdn.scarabresearch.com/ https://d22q3dafggn5rg.cloudfront.net/ https://static.zdassets.com/ https://www.googletagmanager.com/ https://google.com/ https://widget-mediator.zopim.com/ https://www.google-analytics.com/ https://www.gstatic.com/ https://widgets.turnto.com/ https://suggest.dxpapi.com https://jstest.authorize.net https://ajax.cloudflare.com/ https://js-agent.newrelic.com https://bam.nr-data.net/ https://maps.googleapis.com/ https://js.authorize.net/ https://www.youtube.com/ https://s.ytimg.com/ https://static.scarabresearch.com/ https://www.google.com/ https://www.googleapis.com/ https://bam-cell.nr-data.net/ https://plugin.credova.com/ https://static.cloudflareinsights.com/ https://image.grabagun.com https://optimize.google.com https://up.pixel.ad/ https://web-sdk.aptrinsic.com/ https://googleads.g.doubleclick.net/ https://cdn.avmws.com/1023073/ https://ssl.avmws.com/1023073/ https://*.googleapis.com *.google-analytics.com *.analytics.google.com https://d3rr3d0n31t48m.cloudfront.net https://nytrng.com https://voltn.com https://static.traversedlp.com https://s1.listrakbi.com/ https://s2.listrakbi.com/ https://cdn.listrakbi.com/ https://at1.listrakbi.com/ https://al1.listrakbi.com/ https://bl.listrakbi.com/ https://oc.listrakbi.com/ https://services.listrak.com/ https://api.videoly.co/ https://dapi.videoly.co/ https://arches.avantlink.com/ https://api.smooch.io/ https://grabagun.zendesk.com/ assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com https://www.google-analytics.com googleads.g.doubleclick.net analytics.google.com https://www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com www.googletagmanager.com www.google-analytics.com https://developer.adobe.com https://assets.armanet.us *.exponea.com *.credova.com *.plugins.emarsys.net *.scarabresearch.com www.xtento.com cdn.xtento.com self https://maps.googleapis.com https://fonts.googleapis.com/* https://tagmanager.google.com https://d22q3dafggn5rg.cloudfront.net https://www.gstatic.com https://www.google.pl https://www.google.com.ua https://www.google.ca https://static.zdassets.com https://cdns.brsrvr.com https://cdn.scarabresearch.com https://static.cloudflareinsights.com https://*.credova.com https://*.authorize.net https://*.fullstory.com https://cdn.userway.org https://cdnjs.cloudflare.com *.maxmind.com *.turnto.com *.authorize.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.publicsquare.com *.basistheory.com *.googletagmanager.com *.googleadservices.com *.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; img-src 'self' https://www.xtento.com https://p.brsrvr.com https://www.google-analytics.com https://stats.g.doubleclick.net https://www.google.com/ https://www.google.com.ua/ https://amasty.com/ data: https://maps.gstatic.com/ https://maps.googleapis.com/ https://wac.edgecastcdn.net/ https://www.googletagmanager.com/ https://www.google.ca/ https://bam-cell.nr-data.net/ https://plugin.credova.com/ https://image.grabagun.com https://redirect.prod.experiment.routing.cloudfront.aws.a2z.com/ https://optimize.google.com https://pixel.sitescout.com/ https://tracking.avantlink.com/ https://*.googleapis.com https://i.liadm.com https://s1.listrakbi.com/ https://s2.listrakbi.com/ https://sca1.listrakbi.com/ https://sca2.listrakbi.com/ http://mediacdn.espssl.com/ https://dapi.videoly.co/ https://i.ytimg.com/ https://grabagun.zendesk.com/ https://www.gravatar.com/ https://accounts.zendesk.com/ https://*.turnto.com assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net https://cm.everesttech.net https://*.omtrdc.net/ widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com https://www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com www.xtento.com cdn.xtento.com self https://grabagun.com https://img.youtube.com https://maps.googleapis.com https://maps.gstatic.com https://wac.edgecastcdn.net https://d22q3dafggn5rg.cloudfront.net https://www.google.com https://www.google.pl https://www.google.com.ua https://www.google.ca https://static.zdassets.com https://cdns.brsrvr.com https://cdn.scarabresearch.com https://*.credova.com https://*.userway.org wac.edgecastcdn.net store.paradoxlabs.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.publicsquare.com *.gstatic.com *.facebook.com *.reddit.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; frame-src 'self' https://www.google.com https://www.youtube.com https://gun-rebates.com/ https://win-a-truck.com/ https://preferences.grabagun.com/ https://www.youtube-nocookie.com https://sandbox-lending.credova.com/ https://lending.credova.com/ https://image.grabagun.com/ https://optimize.google.com https://pixel.sitescout.com/ https://photos.pixlee.co/ https://*.doubleclick.net/ *.google-analytics.com *.analytics.google.com https://nytrng.com https://services.listrak.com/ https://arches.avantlink.com/ fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com *.credova.com * www.xtento.com self https://*.grabagun.com https://*.credova.com https://*.authorize.net photos.pixlee.co *.authorize.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com https://plumrocket.com *.publicsquare.com *.basistheory.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; font-src 'self' https://fonts.gstatic.com https://optimize.google.com https://image.grabagun.com data: self https://d22q3dafggn5rg.cloudfront.net https://*.authorize.net fonts.gstatic.com data: 'self' 'unsafe-inline'; connect-src 'self' https://ekr.zdassets.com/ https://recommender.scarabresearch.com/ https://grabagun.zendesk.com/ wss://widget-mediator.zopim.com https://cdn-ws.turnto.com/ https://bam.nr-data.net/ https://js.authorize.net/ https://jstest.authorize.net/ https://www.google-analytics.com https://ws.turnto.com https://recommender-eu.scarabresearch.com/ https://static.zdassets.com/ https://apitest.authorize.net/ wss://grabagun.zendesk.com/ https://api2.authorize.net/ https://stats.g.doubleclick.net/ https://bam-cell.nr-data.net/ https://sandbox-lending-api.credova.com/ https://lending-api.credova.com/ https://we.turnto.com/ https://image.grabagun.com https://esp-m.aptrinsic.com/ https://*.googleapis.com *.google-analytics.com *.analytics.google.com https://product.listrakbi.com/ https://recs.listrakbi.com/ https://bl.listrakbi.com/ https://onsite-api.listrak.com/ https://oc.listrakbi.com/ wss://api.smooch.io/faye https://zendesk-eu.my.sentry.io/ https://dapi.videoly.co/ dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://srv.armanet.us https://assets.armanet.us *.exponea.com *.credova.com *.scarabresearch.com *.eservice.emarsys.net self https://stats.g.doubleclick.net https://d22q3dafggn5rg.cloudfront.net https://bam-cell.nr-data.net https://grabagun.zendesk.com https://static.zdassets.com https://cdns.brsrvr.com https://cdn.scarabresearch.com https://*.credova.com https://*.demdex.net https://*.authorize.net https://*.fullstory.com https://*.listrakbi.com https://*.userway.org *.mmapiws.com *.turnto.com *.authorize.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.publicsquare.com *.basistheory.com *.launchdarkly.com *.browser-intake-datadoghq.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app 'self' 'unsafe-inline'; default-src 'self' https://static.zdassets.com https://fonts.googleapis.com/ https://image.grabagun.com self https://d22q3dafggn5rg.cloudfront.net 'self' 'unsafe-inline' 'unsafe-eval'; worker-src 'self' 'unsafe-eval' 'unsafe-inline' https://cdns.brsrvr.com/ https://cdn.scarabresearch.com/ https://d22q3dafggn5rg.cloudfront.net/ https://static.zdassets.com/ https://www.googletagmanager.com/ https://google.com/ https://widget-mediator.zopim.com/ https://www.google-analytics.com/ https://www.gstatic.com/ https://widgets.turnto.com/ https://suggest.dxpapi.com https://jstest.authorize.net https://ajax.cloudflare.com/ https://js-agent.newrelic.com https://bam.nr-data.net/ https://static.olark.com/ https://maps.googleapis.com/ https://js.authorize.net/ https://www.youtube.com/ https://s.ytimg.com/ https://static.scarabresearch.com/ https://www.google.com/ https://www.googleapis.com/ https://bam-cell.nr-data.net/ https://plugin.credova.com/ https://static.cloudflareinsights.com/ https://image.grabagun.com https://optimize.google.com blob: *.google-analytics.com *.analytics.google.com;
expires
Wed, 06 Aug 2025 17:11:29 GMT
pragma
cache
strict-transport-security
max-age=31536000
traceresponse
00-1858ee229bc82751dda6c8ed375fa026-641295b0f51f39bd-01
vary
Accept-Encoding,Cookie
x-cache
MISS, MISS, HIT
x-cache-hits
0, 0, 1
x-content-type-options
nosniff
x-debug-info
eyJyZXRyaWVzIjowfQ==
x-frame-options
SAMEORIGIN
x-platform-server
i-033a8ce68eff1b372
i-033a8ce68eff1b372
x-served-by
cache-bfi-kbfi7400054-BFI, cache-bfi-kbfi7400045-BFI, cache-pdx12331-PDX
x-timer
S1754413887.266251,VS0,VE2245
x-xss-protection
1; mode=block
27 headers detected
Technology Stack Analysis
RequireJS
JavaScript frameworks
RequireJS is a JavaScript library and file loader which manages the dependencies between JavaScript files and in modular programming.
Platform.sh
PaaS
No description available
PayPal
Payment processors
PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.
authorize.net
Payment processors
Authorize.net is a secure online payment gateway service that enables businesses to accept payments through various channels, such as ecommerce websites, mobile devices, and retail stores, providing a trusted platform for processing credit card and electronic cheque payments.
Zendesk
DocumentationIssue trackers
Zendesk is a cloud-based help desk management solution offering customizable tools to build customer service portal, knowledge base and online communities.
+1 more categories
UserWay
Accessibility
UserWay is a web accessibility overlay for websites that claims to improve compliance with accessibility standards.
Sendgrid
Email
SendGrid is a cloud-based email delivery platform for transactional and marketing emails.
reCAPTCHA
Security
reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.
Listrak
Marketing automationCustomer data platform
Listrak is a AI-based marketing automation and CRM solutions that unify, interpret and personalise data to engage customer across channels and devices.
HSTS
Security
HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
Google Tag Manager
Tag managers
Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.
Google Analytics
Analytics
Google Analytics is a free web analytics service that tracks and reports website traffic.
Cloudflare Browser Insights
AnalyticsRUM
Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.
Cloudflare
CDN
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
Bloomreach Discovery
Search enginesA/B Testing
Bloomreach Discovery is a powerful combination of AI-powered site search, SEO, recommendations, and product merchandising.
Website Cookies 19
_vuid
grabagun.com
Value
7b0ab7ba-ef89-4bfe-9243-9d15665f3aca
Expires:8/5/2025
STSIDRDrUiI0H3OYf
.grabagun.com
Value
3cc68174-cda8-4038-abeb-d14fb90bba80
Expires:8/5/2026
GSIDRDrUiI0H3OYf
.grabagun.com
Value
83fb591e-6425-4190-9a9c-a86774eb5031
Expires:9/9/2026
_br_uid_2
.grabagun.com
Value
uid%3D8128278514739%3Av%3D12.0%3Ats%3D1754414351068%3Ahc%3D1
Expires:9/9/2026
recently_compared_product_previous
grabagun.com
Secure Lax
Value
{}
Expires:8/6/2025
recently_viewed_product_previous
grabagun.com
Secure Lax
Value
{}
Expires:8/6/2025
mage-messages
grabagun.com
Secure Strict
Value
Expires:8/6/2025
mage-cache-sessid
grabagun.com
Secure Lax
Value
true
Expires:8/6/2025
mage-cache-storage-section-invalidation
grabagun.com
Secure Lax
Value
{}
Expires:8/6/2025
adi
grabagun.com
Value
9b71ad5e36d7c55add87e17b46614f55
Expires:9/9/2026
_gcl_au
.grabagun.com
Value
1.1.1781393281.1754414349
Expires:11/3/2025
recently_viewed_product
grabagun.com
Secure Lax
Value
{}
Expires:8/6/2025
recently_compared_product
grabagun.com
Secure Lax
Value
{}
Expires:8/6/2025
mage-cache-storage
grabagun.com
Secure Lax
Value
{}
Expires:8/6/2025
form_key
grabagun.com
Secure Lax
Value
9CoH1JwY3GU265kF
Expires:8/6/2025
product_data_storage
grabagun.com
Secure Lax
Value
{}
Expires:8/6/2025
cf_clearance
.grabagun.com
HttpOnly Secure None
Value
7XpJDqRsT6LmSrvi6utGtkQlFCkoVpx67Xe5YTMzqTw-1754414350-1.2.1.1-R.7Xz0TdZW6dNPdzWcjmEZ8OGMAr7GJ_I.CoZwT4Kxx8vPS6LHB.Z3hiv6OYSdX.nipbBxHP_xzfdbthqXq3t75ZXuFdKQs1sO9bxTWEu48fCmMA3MYRZ0VDoEkLDGH0z9rLAu4QSIztyvpi.sZUDY3MD2wNzWx8p_KSPEQW0D3cbJSIVApIi1tU0ZBqPB8E1Gei_gAfXjZoFMLSP.zuMJ7QlnWOFXeicXCv4hGBDp0
Expires:8/5/2026
_ga
.grabagun.com
Value
GA1.1.1414314794.1754414349
Expires:9/9/2026
_ga_YX8G7JT7W2
.grabagun.com
Value
GS2.1.s1754414348$o1$g0$t1754414348$j60$l0$h0
Expires:9/9/2026
External Links 4
Untitled Link
www.facebook.com
Target URL
https://www.facebook.com/pages/GrabAGuncom/105647922853032
Untitled Link
www.twitter.com
Target URL
https://www.twitter.com/grabagun
Untitled Link
www.instagram.com
Target URL
https://www.instagram.com/grabagun_/?hl=en
Untitled Link
www.youtube.com
Target URL
https://www.youtube.com/user/GrabAGunCom
Requested Domains 31
analytics.google.com
Unknown Type
No category information available
api.videoly.co
Unknown Type
No category information available
assets.armanet.us
Unknown Type
No category information available
at1.listrakbi.com
Unknown Type
No category information available
bl.listrakbi.com
Unknown Type
No category information available
cdn.avmws.com
Unknown Type
No category information available
cdn.listrakbi.com
Unknown Type
No category information available
cdn.userway.org
Unknown Type
No category information available
cdns.brsrvr.com
Unknown Type
No category information available
ekr.zdassets.com
Unknown Type
No category information available
fonts.googleapis.com
Unknown Type
No category information available
fonts.gstatic.com
Unknown Type
No category information available
googleads.g.doubleclick.net
Unknown Type
No category information available
grabagun.com
Apex domain
Categories
EcommerceShopping & AuctionsWeaponsMilitary & WeaponsCIPA FilterCIPA
js-agent.newrelic.com
Unknown Type
No category information available
onsite-api.listrak.com
Unknown Type
No category information available
p.brsrvr.com
Unknown Type
No category information available
pixel-sync.sitescout.com
Unknown Type
No category information available
pixel.sitescout.com
Unknown Type
No category information available
plugin.credova.com
Unknown Type
No category information available
recs.listrakbi.com
Unknown Type
No category information available
s1.listrakbi.com
Unknown Type
No category information available
srv.armanet.us
Unknown Type
No category information available
static.cloudflareinsights.com
Unknown Type
No category information available
static.zdassets.com
Unknown Type
No category information available
stats.g.doubleclick.net
Unknown Type
No category information available
td.doubleclick.net
Unknown Type
No category information available
up.pixel.ad
Unknown Type
No category information available
www.google.com
Unknown Type
No category information available
www.googletagmanager.com
Unknown Type
No category information available
www.gstatic.com
Unknown Type
No category information available