Is 4w6lr.xyz safe?

Vendor warnings and a very young domain

Independent research returned a store scam warning with a 1/100 trust score for 4w6lr.xyz, and a separate classification as a suspicious shop based on multiple risk signals including two blacklist detections, a very young domain, and no established public user-review history. These are adverse external findings, not the site's own claims.

The registrable domain is only 173 days old, which is consistent with the vendor observation of a very young domain and leaves little time for any legitimate trading history to accumulate.

The saved antivirus observation reports one independent antivirus family with an adverse result, but that observation is stale and only partially complete, so it should be treated as a real but unconfirmed-timing signal rather than a fresh detection.

A credential-collecting login form with no visible shop

The page displays a login/registration form with fields for a phone number, pre-filled with the +503 El Salvador country code, and a password. A visitor who registers or signs in is handing over a phone number and a password to an operator whose identity is not disclosed on the page.

The page builds its content with scripts, so its own contact details were not visible to the page reader and were not reviewed. No shop catalogue, product listing, or verifiable business address could be confirmed from the page itself.

The vendor classification as a suspicious shop and store scam, combined with the credential-collecting form and the absence of any visible commercial substance, is the pattern of a portal built to harvest credentials rather than to sell goods.

Technical checks that do not offset the operator risk

The browser threat feed returned no threat warning and the saved TLS check found a valid encrypted connection. These are clean technical results, but they only mean no detection was recorded at check time; they do not establish that the operator is trustworthy or that the login form is safe to use.

The domain resolves to an IP address shared by 218 other domains, which is a neutral hosting record on its own but is consistent with bulk-registered or disposable infrastructure rather than a dedicated, established storefront.