Is cedarfits.shop safe?
http://cedarfits.shop/
Checked on
How we checked
Coverage: complete · 6 of 6 applicable core capabilities
- Antivirus (58 of 93 engines answered): completed
- Google Safe Browsing: completed
- page reading: completed
- page capture: completed
- domain records: completed
- web research: completed
Brand-new Shopify storefront sells Alo Yoga-branded activewear with no named operator and a refund policy that still contains an unfilled return-address placeholder
cedarfits.shop is a Shopify-hosted apparel shop that lists Alo Yoga product names and Alo-branded model photography under its own 'cedarfits' wordmark, with no statement of any authorized-reseller relationship. The domain was registered three days before this review, the only contact route is a free iCloud mailbox, and the returns section still reads '[INSERT RETURN ADDRESS]'. Nothing malicious was detected technically, and checkout stays on the same Shopify site, but the operator accountability is thin enough that we rate it Moderate Risk rather than Safe.
At a glance
Saved with this scan; each value is explained in the sections below.
Domain age
3 days old
Registered Nov 9, 2026Expires Nov 9, 2027Certificate
Valid
Expires Feb 7, 2027 (86d)Hosting
Canada (CA)
Shopify, Inc.Popularity
Not in the Cloudflare Radar top list
Antivirus
0/58
No antivirus detections across 58 enginesSafe Browsing
Not flagged
Not flagged on major threat listsCommunity
No reviews yet
Checked
Nov 12, 2026
Where this site sits
- Dangerous1–20
- High Risk21–44
- Moderate Risk45–69
- Low Risk70–84
- Safe85–100
The score combines saved evidence strength and analysis quality. Coverage is reported separately.
Why 48/100
Moderate Risk covers scores 45–69. 6 findings pulled the score down; 2 pushed it up.
- Start75
- -10
- -9
- -8
- Score48
What pulled the score down
- ModerateThe store's contact address is a free-mail inbox (icloud.com) rather than a mailbox on its own domain.-10 pts
- ModerateThe refund policy still contains the template placeholder '[INSERT RETURN ADDRESS]' instead of an actual return destination.-9 pts
- ModerateGarments carry the 'alo' brand mark and Alo product names are used, while the store is branded 'cedarfits' with no stated reseller authorization.-8 pts
- MinorThe registrable domain was three days old at analysis time.
- MinorThe only contact address is a free iCloud inbox, not a mailbox on the shop's own domain, and no phone number is listed.
- MinorSeveral listings show $0.00 prices or a sold-out item at $0.00 on a live storefront.
What pushed the score up
- SupportsA US postal address is published on the contact page.
- SupportsNo detections across 93 engines, no Safe Browsing warning, and a valid TLS certificate.
Points come from the saved evidence ledger: it lowered the score from 75 to 48 and split those 27 points between the findings that show points; the others carry no points in the ledger.
01 · Investigation Brief
Investigation Brief
cedarfits.shop is a Shopify-hosted apparel shop that lists Alo Yoga product names and Alo-branded model photography under its own 'cedarfits' wordmark, with no statement of any authorized-reseller relationship. The domain was registered three days before this review, the only contact route is a free iCloud mailbox, and the returns section still reads '[INSERT RETURN ADDRESS]'. Nothing malicious was detected technically, and checkout stays on the same Shopify site, but the operator accountability is thin enough that we rate it Moderate Risk rather than Safe.
A three-day-old shop with no named owner and a free-mail inbox as its only contact
The registrable domain was three days old at the time of analysis, and the storefront carries only the wordmark 'cedarfits' — no operator name, no registration or trade number, and no social profiles. The header shows search, account and cart icons and nothing else identifying who runs the shop.
The only contact route is a free-mail iCloud inbox, prelim.pear52@icloud.com, rather than a mailbox on cedarfits.shop, and no phone number is listed. A US postal address (12 Hersey St, South Yarmouth MA 02664) is published, which is a genuine point in the store's favour, but it sits alongside blank phone, VAT and trade-number fields.
Alo Yoga branding without authorization, and a returns policy that was never finished
The catalog reproduces Alo Yoga product names — Airlift High-Waist Suit Up Legging, Airlift Suit Up Bra, Accolade pullovers — and the model photos carry a small 'alo' logo on the garments, while the store itself is branded 'cedarfits' with no visible statement of an authorized-reseller relationship or any explanation of how it sources the goods.
Pricing is erratic for a live shop: several listings read 'From $0.00 USD' or show a sold-out item at $0.00, while others show $88.00, $148.00 and $188.00. The refund policy offers a 30-day window and a 10-business-day refund after inspection, but the return destination is still the unfilled template text '[INSERT RETURN ADDRESS]', so a buyer cannot tell where a return would actually go.
Clean technical checks, but they say nothing about who is behind the shop
No malware, phishing or blocklist signal was found: 0 malicious and 0 suspicious detections across 93 engines, the browser threat feed returned no warning, and the saved TLS check found a valid encrypted connection. The storefront is a standard Shopify build with no ad-network hosts, popups, download attempts or notification prompts observed.
The only monetized path is the same-site cart, and checkout stays on cedarfits.shop through Shopify; the terms state that placing an order authorizes the operator and its payment processors to charge the selected method and that cedarfits may decline any order at its discretion. No cross-domain order or payment redirect was observed, so the risk here is commercial and accountability-based, not a technical threat.
Why the score is 48
02 · Security Evidence
Security evidence
Antivirus Engines
0/ 93
No detectionsFresh result
No detections across 58 engines that rated this URL
No antivirus engine that answered raised an adverse result; 35 had no rating for this URL. This is one signal, not a guarantee.
- Malicious
- 0
- Suspicious
- 0
- Total
- 93
- Clean58
- Undetected35
All 93 engine results
- 0xSI_f33d - Unrated
- Abusix - Clean
- Acronis - Clean
- ADMINUSLabs - Clean
- AILabs (MONITORAPP) - Clean
- AlienVault - Clean
- alphaMountain.ai - Unrated
- AlphaSOC - Unrated
- Antiy-AVL - Clean
- ArcSight Threat Intelligence - Unrated
- AutoShun - Unrated
- Bfore.Ai PreCrime - Unrated
- BitDefender - Clean
- Bkav - Unrated
- BlockList - Clean
- Blueliv - Clean
- Certego - Clean
- ChainPatrol - Unrated
- Chong Lua Dao - Clean
- CINS Army - Clean
- CRDF - Clean
- Criminal IP - Unrated
- CSIS Security Group - Unrated
- CTX AI - Clean
- Cyan - Unrated
- Cyble - Clean
- CyRadar - Clean
- desenmascara.me - Clean
- DNS8 - Unrated
- Dr.Web - Clean
- EmergingThreats - Clean
- Emsisoft - Clean
- Ermes - Unrated
- ESET - Clean
- ESTsecurity - Clean
- Forcepoint ThreatSeeker - Clean
- Fortinet - Clean
- Fortra - Unrated
- G-Data - Clean
- GCP Abuse Intelligence - Unrated
- Google Safe Browsing - Clean
- GreenSnow - Clean
- GreyNoise - Unrated
- Gridinsoft - Unrated
- Guardpot - Unrated
- Heimdal Security - Clean
- Hunt.io Intelligence - Unrated
- IPsum - Clean
- Juniper Networks - Clean
- K7AntiVirus - Unrated
- Kaspersky - Clean
- LevelBlue - Clean
- Lionic - Clean
- Lumu - Unrated
- Malwared - Clean
- MalwarePatrol - Clean
- MalwareURL - Unrated
- Mimecast - Unrated
- Netcraft - Unrated
- OpenPhish - Clean
- Orcapot - Unrated
- PhishFort - Unrated
- Phishing Database - Clean
- Phishtank - Clean
- PREBYTES - Clean
- PrecisionSec - Unrated
- Quick Heal - Clean
- Quttera - Clean
- Rising - Clean
- SafeToOpen - Unrated
- Sangfor - Clean
- Sansec eComscan - Unrated
- Scantitan - Clean
- SCUMWARE.org - Clean
- Seclookup - Clean
- Snort IP sample list - Unrated
- SOCRadar - Unrated
- Sophos - Clean
- StopForumSpam - Clean
- Sucuri SiteCheck - Clean
- Synthient - Unrated
- ThreatHive - Clean
- URLhaus - Clean
- URLQuery - Unrated
- Viettel Threat Intelligence - Clean
- VIPRE - Unrated
- ViriBack - Clean
- VX Vault - Clean
- Webroot - Clean
- Xcitium Verdict Cloud - Clean
- Yandex Safebrowsing - Clean
- ZeroCERT - Clean
- ZeroFox - Unrated
How security vendors categorise this site
- Forcepoint ThreatSeekernewly registered websites
Each vendor’s own label for the site, saved with the antivirus result. Labels are separate from the engine verdicts above and can disagree with each other.
Security Scans
Checked against the browser threat feeds available to this scan — no hit.
What we observed
Visual context from the captured page
Product grid shows four columns of activewear listings with model photos bearing a small 'alo' logo on the garments, titled 'Accolade 1/4 Zip Pullover - Athletic Heather Grey', 'Accolade 1/4 Zip Pullover - Black', 'Accolade 1/4 Zip Pullover - Navy' (marked 'Sold out') and 'Accolade Crew Neck Pullover - Athletic Heather Grey'. Prices are inconsistent: the first listing reads 'From $0.00 USD', the sold-out navy pullover reads '$0.00 USD', while the black pullover reads 'From $148.00 USD' and the grey crew neck '$188.00 USD'. Header shows only the wordmark 'cedarfits' with search, account and cart icons; no operator name, logo, contact details or brand-authorization notice is visible. Garment imagery carries the 'alo' brand mark while the storefront is branded 'cedarfits', with no visible statement of an authorized-reseller relationship.
What the captured page showed
4 observations- 01
Product grid shows four columns of activewear listings with model photos bearing a small 'alo' logo on the garments, titled 'Accolade 1/4 Zip Pullover - Athletic Heather Grey', 'Accolade 1/4 Zip Pullover - Black', 'Accolade 1/4 Zip Pullover - Navy' (marked 'Sold out') and 'Accolade Crew Neck Pullover - Athletic Heather Grey'.
- 02
Prices are inconsistent: the first listing reads 'From $0.00 USD', the sold-out navy pullover reads '$0.00 USD', while the black pullover reads 'From $148.00 USD' and the grey crew neck '$188.00 USD'.
- 03
Header shows only the wordmark 'cedarfits' with search, account and cart icons; no operator name, logo, contact details or brand-authorization notice is visible.
- 04
Garment imagery carries the 'alo' brand mark while the storefront is branded 'cedarfits', with no visible statement of an authorized-reseller relationship.
Browser behavior
What our isolated browser recorded while it loaded the page. Host names only: no full addresses are published.
- Pop-ups
- 0
- Download attempts
- 0
- Notification prompts
- 0
- Navigations
- 1
- Other hosts contacted
- 6
Where the page went
- First loadcedarfits.shopSame site
Hosts on our aggressive-advertising list
None contacted.
Test clicks
No test click was made on this page.
What the page says about itself
Quoted from the pages we read: the site's own words, not our findings.
- Page title
cedarfits
Pages we read
- Main page/Read
- Terms/policies/terms-of-serviceRead
- Refund / returns policy/policies/refund-policyRead
- Shipping policy/policies/shipping-policyRead
- Contact page/policies/contact-informationRead
03 · Investigation Story
Investigation story
What the site claims
cedarfits
What we observed
The page content was captured and checked alongside 58 antivirus results.
What independent research found
The search completed without a material external warning or corroborating report.
What remains unverified
The checks completed, but ownership, business claims, and future site behavior can still change after this snapshot.
What kind of site and risk is this?
Threat category
Fake Shop & Commercial Deception
Service and business model
Shop
Observed behavior
Evidence behind this classification
- 01Header shows only the wordmark 'cedarfits' with search, account and cart icons; no operator name, logo, contact details or brand-authorization notice is visible.
- Also 8 listed under Why 48/100 above
Web research findings
Independent findings for cedarfits.shop, including public complaints, named review sources, registration records, and look-alike-domain evidence.
No independently sourced scam reports or credibility records were found for cedarfits.shop. That is common for new or low-traffic sites and does not clear the site.
Reputation Sources
How this domain rates across independent threat-intelligence and blocklist providers.
04 · Domain & Infrastructure
Domain & infrastructure
The plumbing behind the site — who registered it, how it’s encrypted, where it’s hosted, and where it links out. A valid certificate or a calm server doesn’t mean the business is honest — scam sites pass these checks too.
Infrastructure map
- Domaincedarfits.shop
- Redirects tocedarfits.shop
- Hosted byShopify, Inc.
- Referencesfonts.shopifycdn.com · shop.appand 3 more
Domain Timeline
- Nov 9, 2026Domain registered
First appeared in WHOIS records — 3 days old when this review was saved.
- Nov 12, 2026Saved security review — Rated Moderate Risk
The evidence in this saved scan is mixed or incomplete; the completed checks are detailed above.
cedarfits.shop was registered very recently when this review was saved. Freshly-registered domains are disproportionately used for scams, so a young domain whose evidence is mixed or incomplete warrants extra caution.
Contact Verification
Saved contact details can help identify the operator. Their presence supports traceability; it does not prove the business is trustworthy.
- No contact email uses the site's own domain.
- Business contact uses a free-mail provider (icloud.com).
- No phone number listed on the captured page.
- Postal address visible on the page.
Domain & Encryption
At the scan on Nov 12, 2026: 1% of the registration period had passed
A certificate issued weeks or days before the scan on a domain registered recently is common on short-lived sites, though new legitimate sites look the same.
At the scan on Nov 12, 2026: 4% of the validity period had passed
Certificate issued for cedarfits.shop.
A shared content-delivery network address answers for many sites, so it is not the site's own server and says nothing about who runs it.
Payment providers the page loads
- Shop Pay
Read from the first 20 outside domains the page loads and the shop platform it uses; the web server and platform rows are under Hosting & Technology. A payment script on the page does not prove the shop accepts that method at checkout, or that you are protected.
Redirect Chain
- 1301http://cedarfits.shop/
- 2200https://cedarfits.shop/
Server Reputation
Referenced Domains
Outbound domains this page links to or loads resources from. Each links to its own security scan.
Grouped by what each domain is for. in page: named in the page’s HTML. contacted: the browser loaded it while rendering the page. ad list: on our aggressive-advertising list.
Payments1
- shop.appin pagecontacted
CDN & fonts6
- cdn.shopify.comin pagecontacted
- error-analytics-sessions-production.shopifysvc.comcontacted
- fonts.shopifycdn.comin page
- monorail-edge.shopifysvc.comin pagecontacted
- otlp-http-production.shopifysvc.comcontacted
- shopify-assets.shopifycdn.comcontacted
Platform & social1
- shopify.comin page
05 · Evidence Ledger
Evidence ledger
- Antiviruscomplete
- Browser threat feedcomplete
- Page contentcomplete
- Analysiscomplete
- Visual evidencecomplete
The conclusion is supported by the evidence saved with this report.
Technical threat
unknownMalware, phishing, credential theft and hostile infrastructure.
No confirmed evidence in this dimension.
Operator / customer risk
suspiciousComplaints, withdrawals, business conduct and commercial traps.
Source coverage and freshness
Status shows whether usable evidence was saved; finding shows what that evidence observed.
| Source | Result | Completion | Finding | Freshness |
|---|---|---|---|---|
| Antivirus | 0 of 93 engines flagged | Completed | No adverse finding | fresh · analysed Nov 12, 2026 |
| Browser protection | No browser threat-list match | Completed | No adverse finding | this scan · Nov 12, 2026 |
| Page content | Page fetched · HTTP 200 | Completed | No adverse finding | this scan · Nov 12, 2026 |
| Visual evidence | 4 visible observations saved with the page capture | Completed | No adverse finding | this scan · Nov 12, 2026 |
| Independent research | The search completed without a material external finding | Completed | No adverse finding | this scan · Nov 12, 2026 |
- Antivirus
- Result0 of 93 engines flagged
- CompletionCompletedFindingNo adverse finding
- Freshnessfresh · analysed Nov 12, 2026
- Browser protection
- ResultNo browser threat-list match
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Nov 12, 2026
- Page content
- ResultPage fetched · HTTP 200
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Nov 12, 2026
- Visual evidence
- Result4 visible observations saved with the page capture
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Nov 12, 2026
- Independent research
- ResultThe search completed without a material external finding
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Nov 12, 2026
07 · Safety FAQ
Safety FAQ
Answered from the saved verdict and evidence in this report.
Is cedarfits.shop a scam or is it safe?
Is cedarfits.shop safe to use?
Has cedarfits.shop been flagged by antivirus engines?
Is cedarfits.shop on any phishing or malware blacklists?
How old is the cedarfits.shop domain?
Does cedarfits.shop have a valid SSL certificate?
Where is cedarfits.shop hosted?
How often is the cedarfits.shop report updated?
08 · Final Verdict
Final verdict
Brand-new Shopify storefront sells Alo Yoga-branded activewear with no named operator and a refund policy that still contains an unfilled return-address placeholder
cedarfits.shop is a Shopify-hosted apparel shop that lists Alo Yoga product names and Alo-branded model photography under its own 'cedarfits' wordmark, with no statement of any authorized-reseller relationship. The domain was registered three days before this review, the only contact route is a free iCloud mailbox, and the returns section still reads '[INSERT RETURN ADDRESS]'. Nothing malicious was detected technically, and checkout stays on the same Shopify site, but the operator accountability is thin enough that we rate it Moderate Risk rather than Safe.
09 · Community
Community
Are you the owner of cedarfits.shop?Verify and reply