Is bergberg.shop safe?
http://bergberg.shop/
Coveragestrong3 of 4 applicable core capabilities
Fake 'Berg & Berg' shop on a look-alike domain, flagged for phishing by multiple antivirus engines
bergberg.shop presents itself as the menswear brand 'Berg & Berg' and offers a storefront with cart and checkout actions, but the real brand operates from a different domain and this site's whole identity rests on a recently registered look-alike address. Four independent antivirus families returned adverse results for the domain, which is a saved detection rather than a fresh submission. The site also shows no operator identity online: no postal address, no phone number, and no contact email on its own domain. With strong technical detections, a brand-impersonation pattern, and no verifiable operator, the score sits in the Dangerous band.
Loading saved screenshot
Preparing the saved page preview.
Where this site sits
- Dangerous1–20
- High Risk21–44
- Moderate Risk45–69
- Low Risk70–84
- Safe85–100
The score combines saved evidence strength and analysis quality. Coverage is reported separately.
01 · Investigation Brief
Investigation Brief
bergberg.shop presents itself as the menswear brand 'Berg & Berg' and offers a storefront with cart and checkout actions, but the real brand operates from a different domain and this site's whole identity rests on a recently registered look-alike address. Four independent antivirus families returned adverse results for the domain, which is a saved detection rather than a fresh submission. The site also shows no operator identity online: no postal address, no phone number, and no contact email on its own domain. With strong technical detections, a brand-impersonation pattern, and no verifiable operator, the score sits in the Dangerous band.
A brand name borrowed, not owned
The site's visible branding states 'Berg & Berg', matching a Swedish menswear brand founded in 2009. The domain hosting this storefront is bergberg.shop, not the brand's own address, and the registration date on record is 2026-04-11 — a very recent registration for a storefront that presents itself under an established brand name.
No operator identity is published on the captured page: there is no phone number, no operator postal address, and no contact email using the site's own domain. On a store that takes orders, this combination removes the normal ways a buyer could verify who they are actually paying.
Technical detections versus clean transport checks
Four independent antivirus families reported an adverse result for this domain, naming vendors including BitDefender, CRDF, CyRadar and G-Data. That is a saved detection observation, so it should be treated as real evidence of past reputation flags, though it does not carry a fresh timestamp and the specific threat label per engine is not shown here.
On the supportive side, the browser threat feed returned no warning for the domain, and the saved TLS check shows a valid encrypted connection. Those checks only tell us the certificate is in order and no current Safe Browsing block is in place; they do not address who operates the store or whether a checkout on it is safe.
Why the score is 18
4 independent antivirus families reported an adverse result. This comes from a saved antivirus observation rather than a new submission, so treat the detection as real but confirm the timing. Coverage remains separate so missing sources cannot be mistaken for clean results.
02 · Security Evidence
Security evidence
Antivirus Engines
7/ 93
detectionsSaved analysis from October 11, 2026 - stale
7 engines flagged this URL
Every saved adverse engine is listed below. The full provider matrix remains available for audit.
- Malicious
- 5
- Suspicious
- 2
- Total
- 93
| Engine | Finding |
|---|---|
| BitDefenderMalicious | phishing |
| CRDFMalicious | malicious |
| CyRadarMalicious | phishing |
| G-DataMalicious | phishing |
| NetcraftMalicious | malicious |
| ESETSuspicious | suspicious |
| GridinsoftSuspicious | suspicious |
All 93 engine results
- BitDefender - phishing - Malicious
- CRDF - Malicious
- CyRadar - phishing - Malicious
- G-Data - phishing - Malicious
- Netcraft - Malicious
- ESET - Suspicious
- Gridinsoft - Suspicious
- 0xSI_f33d - Unrated
- Abusix - Clean
- Acronis - Clean
- ADMINUSLabs - Clean
- AILabs (MONITORAPP) - Clean
- AlienVault - Clean
- alphaMountain.ai - Clean
- AlphaSOC - Unrated
- Antiy-AVL - Clean
- ArcSight Threat Intelligence - Unrated
- AutoShun - Unrated
- Bfore.Ai PreCrime - Unrated
- Bkav - Unrated
- BlockList - Clean
- Blueliv - Clean
- Certego - Clean
- ChainPatrol - Unrated
- Chong Lua Dao - Clean
- CINS Army - Clean
- Criminal IP - Unrated
- CSIS Security Group - Unrated
- CTX AI - Clean
- Cyan - Unrated
- Cyble - Clean
- desenmascara.me - Clean
- DNS8 - Unrated
- Dr.Web - Clean
- EmergingThreats - Clean
- Emsisoft - Clean
- Ermes - Unrated
- ESTsecurity - Clean
- Forcepoint ThreatSeeker - Clean
- Fortinet - Clean
- Fortra - Unrated
- GCP Abuse Intelligence - Unrated
- Google Safe Browsing - Clean
- GreenSnow - Clean
- GreyNoise - Unrated
- Guardpot - Unrated
- Heimdal Security - Clean
- Hunt.io Intelligence - Unrated
- IPsum - Clean
- Juniper Networks - Clean
- K7AntiVirus - Unrated
- Kaspersky - Clean
- LevelBlue - Clean
- Lionic - Clean
- Lumu - Unrated
- Malwared - Clean
- MalwarePatrol - Clean
- MalwareURL - Unrated
- Mimecast - Unrated
- OpenPhish - Clean
- Orcapot - Unrated
- PhishFort - Unrated
- Phishing Database - Clean
- Phishtank - Clean
- PREBYTES - Clean
- PrecisionSec - Unrated
- Quick Heal - Clean
- Quttera - Clean
- Rising - Clean
- SafeToOpen - Unrated
- Sangfor - Clean
- Sansec eComscan - Unrated
- Scantitan - Clean
- SCUMWARE.org - Clean
- Seclookup - Clean
- Snort IP sample list - Unrated
- SOCRadar - Unrated
- Sophos - Clean
- StopForumSpam - Clean
- Sucuri SiteCheck - Clean
- Synthient - Unrated
- ThreatHive - Clean
- URLhaus - Clean
- URLQuery - Unrated
- Viettel Threat Intelligence - Clean
- VIPRE - Unrated
- ViriBack - Clean
- VX Vault - Clean
- Webroot - Clean
- Xcitium Verdict Cloud - Unrated
- Yandex Safebrowsing - Clean
- ZeroCERT - Clean
- ZeroFox - Unrated
Security Scans
Checked against the browser threat feeds available to this scan — no hit.
What we observed
Loading saved screenshot
Preparing the saved page preview.
Visual context from the captured page
Berg & Berg
What the captured page showed
1 observation- 01
Berg & Berg
03 · Investigation Story
Investigation story
What the site claims
Berg & Berg - Classic Style with a Modern Nordic Twist | Berg & Berg
What we observed
The page content was captured and checked alongside 60 antivirus results.
What independent research found
2 external findings were saved and compared with the page evidence.
What remains unverified
1 of the 4 applicable core capabilities did not complete, so those gaps remain visible in the coverage ledger.
What kind of site and risk is this?
Threat category
Phishing & Impersonation
Service and business model
Shop
Observed behavior
Evidence behind this classification
- 01The site presents the 'Berg & Berg' menswear brand name on a look-alike domain (bergberg.shop) rather than the brand's own address.
- 02The domain's registration date on record is 2026-04-11, which is very recent compared with the brand history the site's branding implies.
- 034 independent antivirus families reported an adverse result. This comes from a saved antivirus observation rather than a new submission, so treat the detection as real but confirm the timing.
What this means for you
What a visitor clicking through actually does
The storefront drives visitors into its commercial flow with a 'Shop Now' button and a 'Shop the Collection' link, both pointing to internal product listings on the same host.
How the observed mechanism works
The evidence-backed path
Each stage below is preserved from the grounded analysis and linked to saved evidence.
The cart and shop navigation entry points ('Cart', 'Shop') keep the visitor on-site through product selection, and the 'Shop Sale' tile pushes a discounted-sale funnel. Combined with the brand impersonation and the missing operator identity, the path ends at a checkout page belonging to an unverified operator rather than the real Berg & Berg brand.
Do not enter personal details, card numbers or login credentials on bergberg.shop. If you were looking for the real Berg & Berg brand, go directly to its own published domain rather than clicking store listings or links under this host. Treat any product or sale offer here as unverified until the operator can be independently identified. If you believe you already submitted payment or account data on this site, contact your card issuer or bank and report the transaction as potentially fraudulent.
Web research findings
Independent findings for bergberg.shop, including public complaints, named review sources, registration records, and look-alike-domain evidence. A missing result is shown as unverified, never converted into a clean bill of health.
Reputation Sources
How this domain rates across independent threat-intelligence and blocklist providers.
04 · Domain & Infrastructure
Domain & infrastructure
The plumbing behind the site — who registered it, how it’s encrypted, where it’s hosted, and where it links out. A valid certificate or a calm server doesn’t mean the business is honest — scam sites pass these checks too. Use this to corroborate the verdict, not to overturn it.
Infrastructure map
How the saved page connected to the wider web.
- Domainbergberg.shop
- Redirects tobergberg.shop
- Hosted byBeijing Ruihao Kai Yuan Technology Co., Ltd
- Referencesfonts.googleapis.com · fonts.gstatic.com
Contact Verification
Saved contact details can help identify the operator. Their presence supports traceability; it does not prove the business is trustworthy.
- No contact email uses the site's own domain.
- No phone number listed on the captured page.
- No operator postal address visible on the captured page.
Domain & Encryption
Redirect Chain
- 1301http://bergberg.shop/
- 2200https://bergberg.shop/
Server Reputation
Referenced Domains
Outbound domains this page links to or loads resources from. Each links to its own security scan.
05 · Evidence Ledger
Evidence ledger
- Antiviruspartial
- Browser threat feedcomplete
- Page contentcomplete
- Analysiscomplete
- Visual evidencecomplete
The conclusion is supported by the evidence saved with this report.
Technical threat
suspiciousMalware, phishing, credential theft and hostile infrastructure.
4 independent antivirus families reported an adverse result. This comes from a saved antivirus observation rather than a new submission, so treat the detection as real but confirm the timing. · The site's commercial actions — 'Shop Sale', 'Shop', 'Cart', 'Shop Now' and 'Shop the Collection' — all point to internal pages on the same host, so no cross-domain sale, affiliate or redirect destination appears in the captured page.
Operator / customer risk
suspiciousComplaints, withdrawals, business conduct and commercial traps.
The site presents the 'Berg & Berg' menswear brand name on a look-alike domain (bergberg.shop) rather than the brand's own address. · The domain's registration date on record is 2026-04-11, which is very recent compared with the brand history the site's branding implies.
Source coverage and freshness
Status shows whether usable evidence was saved; finding shows what that evidence observed.
| Source | Result | Completion | Finding | Freshness |
|---|---|---|---|---|
| Antivirus | 7 of 93 engines flagged | Limited | Adverse | stale fallback · analysed Oct 11, 2026 |
| Browser protection | No browser threat-list match | Completed | No adverse finding | this scan · Oct 17, 2026 |
| Page content | Page fetched · HTTP 200 | Completed | No adverse finding | this scan · Oct 17, 2026 |
| Visual evidence | 1 visible observation saved with the page capture | Completed | No adverse finding | this scan · Oct 17, 2026 |
| Independent research | 2 independent findings were saved | Completed | No adverse finding | this scan · Oct 17, 2026 |
- Antivirus
- Result7 of 93 engines flagged
- CompletionLimited
- FindingAdverse
- Freshnessstale fallback · analysed Oct 11, 2026
- Browser protection
- ResultNo browser threat-list match
- CompletionCompleted
- FindingNo adverse finding
- Freshnessthis scan · Oct 17, 2026
- Page content
- ResultPage fetched · HTTP 200
- CompletionCompleted
- FindingNo adverse finding
- Freshnessthis scan · Oct 17, 2026
- Visual evidence
- Result1 visible observation saved with the page capture
- CompletionCompleted
- FindingNo adverse finding
- Freshnessthis scan · Oct 17, 2026
- Independent research
- Result2 independent findings were saved
- CompletionCompleted
- FindingNo adverse finding
- Freshnessthis scan · Oct 17, 2026
07 · Safety FAQ
Safety FAQ
Common questions, answered directly from the scan data above — so the answers reflect the saved verdict and evidence in this report.
Is bergberg.shop a scam or a legit website?
Is bergberg.shop safe to use?
What should I do if I already gave my details to bergberg.shop?
Can I get my money back from bergberg.shop?
Did bergberg.shop steal my password or personal information?
How do I report bergberg.shop?
Why does bergberg.shop look legitimate if it's a scam?
Has bergberg.shop been flagged by antivirus engines?
Is bergberg.shop on any phishing or malware blacklists?
Where is bergberg.shop hosted?
How often is the bergberg.shop report updated?
08 · Final Verdict
Final verdict
Fake 'Berg & Berg' shop on a look-alike domain, flagged for phishing by multiple antivirus engines
bergberg.shop presents itself as the menswear brand 'Berg & Berg' and offers a storefront with cart and checkout actions, but the real brand operates from a different domain and this site's whole identity rests on a recently registered look-alike address. Four independent antivirus families returned adverse results for the domain, which is a saved detection rather than a fresh submission. The site also shows no operator identity online: no postal address, no phone number, and no contact email on its own domain. With strong technical detections, a brand-impersonation pattern, and no verifiable operator, the score sits in the Dangerous band.
09 · Community