Fireworks1.com presents a confusing picture. On one hand, the domain has been around for 25 years and includes standard business pages like an about section, privacy policy, and terms of service. That looks like a legitimate operation. But there is a dealbreaker here: the site does not use HTTPS encryption. For any e-commerce site that asks you to create an account or make a purchase, that is an unacceptable gap. Without encryption, your login credentials, credit card number, and personal details travel across the internet in plain, readable form. A 25-year-old domain does not compensate for that risk. While we cannot confirm whether fireworks1.com is a scam, the lack of basic security means you should not trust it with your money or private data. Stick to retailers that protect your connection with HTTPS — it is the bare minimum for safe online shopping.
No — fireworks1.com doesn't look safe
In plain English
This site has a serious security problem: it doesn't use HTTPS, meaning any information you submit — including passwords and payment details — could be intercepted. Despite having a long domain history and proper business disclosures, the lack of basic encryption makes it unsafe to use for purchases or account creation. I would avoid entering any personal or financial information here.
What you should do now
Don't panic. These steps limit the damage, and the sooner you take them the better.
Don't enter any details
No passwords, card numbers or personal information — even if the site looks professional.
Close the tab
Especially if you got here from an email, text message or social media ad.
Already paid? Call your bank
Contact your bank or card provider right away. They can often stop or reverse a recent payment.
Warn others
Report the site and share this check with anyone who sent you the link.
Where the score comes from
No HTTPS on an e-commerce site is a critical failure. User logins and payments would be sent in plaintext. This alone makes the site unsafe to use for transactions.
Domain registered over 25 years ago, with a legal entity disclosure page and contact information. This gives reasonable confidence that a real business operates the site.
The domain is old and not blacklisted, but it has no Wayback Machine history and no Trustpilot presence. The long history is positive, but the missing archive is odd for an established site.
Clear about page, contact details, and social media links. The site openly communicates who they are, which is good for a retailer.
Privacy policy and terms of service are present, along with an Impressum page. These meet basic legal requirements for a US-based e-commerce site.
Standard hosting on AWS with email authentication configured. DNSSEC is missing but not a dealbreaker. The infrastructure is functional but not exceptional.
What we checked
Think this verdict is wrong?
Site owners can request a fresh scan. Scores update automatically as signals change.