Is eaglestonetoy.com safe?
http://eaglestonetoy.com/
Checked on
How we checked
Coverage: strong · 3 of 4 applicable core capabilities
- Antivirus (58 of 92 engines answered) · saved result: did not fully complete
- Google Safe Browsing: completed
- page reading: completed
- page capture: completed
- domain records: completed
- web research: completed
EagleStone is a small Shopify toy storefront that sends buyers to Amazon, with no disclosed operator identity
eaglestonetoy.com presents itself as EagleStone, a toy shop running on Shopify, with product pages carrying 'Buy it Now' and 'Buy Now' buttons. Those buttons do not complete a purchase on this site: the commercial link graph shows them pointing to amazon.com and amazon.co.uk, so the storefront works as an affiliate front-end that hands the actual transaction to Amazon. The domain is over six years old and the saved checks found no malware, no Safe Browsing warning and a valid encrypted connection, which is why this is not rated as a dangerous site. What holds the score in the moderate band is the operator side: the site publishes no postal address or legal entity, its only contact is a generic service@ mailbox on its own domain plus a phone number, and its About-us wording matches a template used by unrelated shops. Nothing in the evidence shows a fake checkout, a non-delivery pattern or a payment trap, so the concern is transparency and the off-site purchase path rather than proven fraud.
Loading saved screenshot
Preparing the saved page preview.
Where this site sits
- Dangerous1–20
- High Risk21–44
- Moderate Risk45–69
- Low Risk70–84
- Safe85–100
The score combines saved evidence strength and analysis quality. Coverage is reported separately.
Why 62/100
Moderate Risk covers scores 45–69. 3 findings pulled the score down; 3 pushed it up.
What pulled the score down
- ModerateThe only contact mailbox is a generic service@ address on the site's own domain, a pattern repeated across fake-shop networks.
- Moderate2 antivirus results marked the URL as suspicious. This comes from a saved antivirus observation rather than a new submission, so treat the detection as real but confirm the timing.
- MinorNo operator postal address is visible on the captured page, leaving the business behind the storefront unidentified.
What pushed the score up
- SupportsThe registrable domain is 2421 days old, which argues against a throwaway scam host.
- SupportsThe browser threat feed returned no threat warning and the saved TLS check found a valid encrypted connection.
- SupportsThe site lists a contact email on its own domain and a phone number, so a visitor has some route to reach the store.
No points per finding are stored for this report: our analysis weighed all findings together to set the score. Each finding shows its saved severity instead (Decisive, Strong, Moderate or Minor). Community reviews never change the Safety Score.
01 · Investigation Brief
Investigation Brief
eaglestonetoy.com presents itself as EagleStone, a toy shop running on Shopify, with product pages carrying 'Buy it Now' and 'Buy Now' buttons. Those buttons do not complete a purchase on this site: the commercial link graph shows them pointing to amazon.com and amazon.co.uk, so the storefront works as an affiliate front-end that hands the actual transaction to Amazon. The domain is over six years old and the saved checks found no malware, no Safe Browsing warning and a valid encrypted connection, which is why this is not rated as a dangerous site. What holds the score in the moderate band is the operator side: the site publishes no postal address or legal entity, its only contact is a generic service@ mailbox on its own domain plus a phone number, and its About-us wording matches a template used by unrelated shops. Nothing in the evidence shows a fake checkout, a non-delivery pattern or a payment trap, so the concern is transparency and the off-site purchase path rather than proven fraud.
The storefront sells, but Amazon takes the order
The captured page is a Shopify storefront: the footer carries 'Powered by Shopify', and the product area is built around repeated 'Buy it Now' and 'Buy Now' controls. A cart control is also present, so the page is styled as a normal shop rather than a pure link page.
The decisive detail is where those buttons lead. The commercial link graph records the 'Buy it Now' and 'Buy Now' controls as cross-site links to amazon.com and amazon.co.uk, with commercial intent and explicit monetization. In practice a visitor who clicks to buy leaves eaglestonetoy.com and completes the purchase on Amazon, which means the storefront is monetized as an affiliate referral rather than as a direct seller.
That structure is not inherently malicious, and it also limits the harm a buyer can suffer here: the card details and the order itself are handled by Amazon, not by this domain. The risk that remains is informational, because the visitor is dealing with an intermediary whose identity is not disclosed anywhere on the page.
No operator identity, only a generic mailbox
The captured page shows no operator postal address, so there is no way for a visitor to identify the business behind the storefront or where it is registered. The only contact route visible is a generic service@ mailbox on the site's own domain, service@eaglestonetoy.com, together with a listed phone number, +1 (502) 354-8988.
The generic service@ mailbox is a pattern that recurs across fake-shop networks, which is why it is treated as an adverse signal here. It is not proof of fraud on its own, and the same mailbox style is used by plenty of small legitimate stores, so it is weighed as a transparency problem rather than as evidence of a scam.
The About-us wording on the site matches a template also used by unrelated online shops. In this case the template match is recorded as background only, so it does not by itself establish that this store is part of a fake-shop operation.
Clean technical checks, but a stale suspicious flag
The saved technical checks are reassuring: the browser threat feed returned no threat warning, the TLS check found a valid encrypted connection, and the registrable domain is 2421 days old. A six-year-old domain with no current blocklist warning is a meaningful counterweight against the idea that this is a throwaway scam host.
There is one adverse technical record: two antivirus results previously marked the URL as suspicious, from Gridinsoft and URLQuery. That observation is stale and only partial, so it should be read as a historical flag to confirm rather than as a current detection, and it does not by itself describe what the site does.
Independent web research for this scan completed with evidence, but the material gathered does not establish an operator reputation either way, and the legal entity behind the domain remains unidentified. The score therefore reflects a technically clean but operationally opaque storefront, not a confirmed fraud.
Why the score is 62
The only contact mailbox is a generic service@ address on the site's own domain, a pattern repeated across fake-shop networks. Coverage remains separate so missing sources cannot be mistaken for clean results.
02 · Security Evidence
Security evidence
Antivirus Engines
2/ 92
detectionsSaved analysis from October 2, 2026 - stale
2 engines flagged this URL
Every saved adverse engine is listed below. The full provider matrix remains available for audit.
- Malicious
- 0
- Suspicious
- 2
- Total
- 92
| Engine | Finding |
|---|---|
| GridinsoftSuspicious | suspicious |
| URLQuerySuspicious | suspicious |
All 92 engine results
- Gridinsoft - Suspicious
- URLQuery - Suspicious
- 0xSI_f33d - Unrated
- Abusix - Clean
- Acronis - Clean
- ADMINUSLabs - Clean
- AILabs (MONITORAPP) - Clean
- AlienVault - Clean
- alphaMountain.ai - Unrated
- AlphaSOC - Unrated
- Antiy-AVL - Clean
- ArcSight Threat Intelligence - Unrated
- AutoShun - Unrated
- Bfore.Ai PreCrime - Unrated
- BitDefender - Clean
- Bkav - Unrated
- BlockList - Clean
- Blueliv - Clean
- Certego - Clean
- ChainPatrol - Unrated
- Chong Lua Dao - Clean
- CINS Army - Clean
- CRDF - Clean
- Criminal IP - Unrated
- CSIS Security Group - Unrated
- CTX AI - Clean
- Cyan - Unrated
- Cyble - Clean
- CyRadar - Clean
- desenmascara.me - Clean
- DNS8 - Unrated
- Dr.Web - Clean
- EmergingThreats - Clean
- Emsisoft - Clean
- Ermes - Unrated
- ESET - Clean
- ESTsecurity - Clean
- Forcepoint ThreatSeeker - Unrated
- Fortinet - Clean
- Fortra - Unrated
- G-Data - Clean
- GCP Abuse Intelligence - Unrated
- Google Safe Browsing - Clean
- GreenSnow - Clean
- GreyNoise - Unrated
- Guardpot - Unrated
- Heimdal Security - Clean
- Hunt.io Intelligence - Unrated
- IPsum - Clean
- Juniper Networks - Clean
- K7AntiVirus - Unrated
- Kaspersky - Clean
- LevelBlue - Clean
- Lionic - Clean
- Lumu - Unrated
- Malwared - Clean
- MalwarePatrol - Clean
- MalwareURL - Unrated
- Mimecast - Unrated
- Netcraft - Unrated
- OpenPhish - Clean
- PhishFort - Unrated
- Phishing Database - Clean
- Phishtank - Clean
- PREBYTES - Clean
- PrecisionSec - Unrated
- Quick Heal - Clean
- Quttera - Clean
- Rising - Clean
- SafeToOpen - Unrated
- Sangfor - Clean
- Sansec eComscan - Unrated
- Scantitan - Clean
- SCUMWARE.org - Clean
- Seclookup - Clean
- Snort IP sample list - Unrated
- SOCRadar - Unrated
- Sophos - Clean
- StopForumSpam - Clean
- Sucuri SiteCheck - Clean
- Synthient - Unrated
- ThreatHive - Clean
- URLhaus - Clean
- Viettel Threat Intelligence - Clean
- VIPRE - Unrated
- ViriBack - Clean
- VX Vault - Clean
- Webroot - Clean
- Xcitium Verdict Cloud - Unrated
- Yandex Safebrowsing - Clean
- ZeroCERT - Clean
- ZeroFox - Unrated
How security vendors categorise this site
- Googleretail
Each vendor’s own label for the site, saved with the antivirus result. Labels are separate from the engine verdicts above and can disagree with each other.
Security Scans
Checked against the browser threat feeds available to this scan — no hit.
What we observed
Loading saved screenshot
Preparing the saved page preview.
Visual context from the captured page
EagleStone
What the captured page showed
1 observation- 01
EagleStone
What the page says about itself
What the site says about itself, quoted from the pages we read. The site wrote these words; they are not our findings.
- Page title
EagleStone
Pages we read
- Main page/Read
- About page/pages/about-usRead
- Terms/policies/terms-of-serviceRead
- Refund / returns policy/policies/refund-policyRead
- Shipping policy/policies/shipping-policyRead
- Contact page/pages/contactRead
03 · Investigation Story
Investigation story
What the site claims
EagleStone
What we observed
The page content was captured and checked alongside 58 antivirus results.
What independent research found
The search completed without a material external warning or corroborating report.
What remains unverified
1 of the 4 applicable core capabilities did not complete, so those gaps remain visible in the coverage ledger.
What kind of site and risk is this?
Threat category
No threat category confirmed
Service and business model
Shop
Observed behavior
Evidence behind this classification
- 01The storefront's 'Buy it Now' and 'Buy Now' controls are cross-site commercial links to amazon.com and amazon.co.uk, so purchases are completed on Amazon rather than on this domain.
- 02No operator postal address is visible on the captured page, leaving the business behind the storefront unidentified.
- 03The only contact mailbox is a generic service@ address on the site's own domain, a pattern repeated across fake-shop networks.
Web research findings
Independent findings for eaglestonetoy.com, including public complaints, named review sources, registration records, and look-alike-domain evidence. A missing result is shown as unverified, never converted into a clean bill of health.
No independently sourced scam reports or credibility records were found for eaglestonetoy.com. That is common for new or low-traffic sites and does not clear the site.
Reputation Sources
How this domain rates across independent threat-intelligence and blocklist providers.
04 · Domain & Infrastructure
Domain & infrastructure
The plumbing behind the site — who registered it, how it’s encrypted, where it’s hosted, and where it links out. A valid certificate or a calm server doesn’t mean the business is honest — scam sites pass these checks too. Use this to corroborate the verdict, not to overturn it.
Infrastructure map
How the saved page connected to the wider web.
- Domaineaglestonetoy.com
- Redirects towww.eaglestonetoy.com
- Hosted byShopify, Inc.
- Referencesstatic.zdassets.com · fonts.shopifycdn.com
Domain Timeline
- Mar 7, 2020Domain registered
First appeared in WHOIS records — 6 years old when this review was saved.
- Oct 23, 2026Saved security review — Rated Moderate Risk
The evidence in this saved scan is mixed or incomplete; the completed checks are detailed above.
Contact Verification
Saved contact details can help identify the operator. Their presence supports traceability; it does not prove the business is trustworthy.
- No operator postal address visible on the captured page.
- Contact email on the site's own domain (service@eaglestonetoy.com).
- Phone number listed (+1 (502) 354-8988).
- Links to 20 social profiles.
Domain & Encryption
Certificate issued for www.eaglestonetoy.com.
A shared content-delivery network address answers for many sites, so it is not the site's own server and says nothing about who runs it.
Chat, reviews and email
- Zendesk
- Judge.me reviews
Payment providers the page loads
None seen among the outside domains we saved.
Read from the first 20 outside domains the page loads and the shop platform it uses; the web server and platform rows are under Hosting & Technology. A payment script on the page does not prove the shop accepts that method at checkout, or that you are protected.
Redirect Chain
- 1301http://eaglestonetoy.com/
- 2301https://eaglestonetoy.com/
- 3200https://www.eaglestonetoy.com/
Server Reputation
Referenced Domains
Outbound domains this page links to or loads resources from. Each links to its own security scan.
05 · Evidence Ledger
Evidence ledger
- Antiviruspartial
- Browser threat feedcomplete
- Page contentcomplete
- Analysiscomplete
- Visual evidencecomplete
The conclusion is supported by the evidence saved with this report.
Technical threat
unknownMalware, phishing, credential theft and hostile infrastructure.
2 antivirus results marked the URL as suspicious. This comes from a saved antivirus observation rather than a new submission, so treat the detection as real but confirm the timing.
Operator / customer risk
suspiciousComplaints, withdrawals, business conduct and commercial traps.
The only contact mailbox is a generic service@ address on the site's own domain, a pattern repeated across fake-shop networks. · No operator postal address is visible on the captured page, leaving the business behind the storefront unidentified.
Source coverage and freshness
Status shows whether usable evidence was saved; finding shows what that evidence observed.
| Source | Result | Completion | Finding | Freshness |
|---|---|---|---|---|
| Antivirus | 2 of 92 engines flagged | Limited | Adverse | stale fallback · analysed Oct 2, 2026 |
| Browser protection | No browser threat-list match | Completed | No adverse finding | this scan · Oct 23, 2026 |
| Page content | Page fetched · HTTP 200 | Completed | No adverse finding | this scan · Oct 23, 2026 |
| Visual evidence | 1 visible observation saved with the page capture | Completed | No adverse finding | this scan · Oct 23, 2026 |
| Independent research | The search completed without a material external finding | Completed | No adverse finding | this scan · Oct 23, 2026 |
- Antivirus
- Result2 of 92 engines flagged
- CompletionLimitedFindingAdverse
- Freshnessstale fallback · analysed Oct 2, 2026
- Browser protection
- ResultNo browser threat-list match
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Oct 23, 2026
- Page content
- ResultPage fetched · HTTP 200
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Oct 23, 2026
- Visual evidence
- Result1 visible observation saved with the page capture
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Oct 23, 2026
- Independent research
- ResultThe search completed without a material external finding
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Oct 23, 2026
07 · Safety FAQ
Safety FAQ
Common questions, answered directly from the scan data above — so the answers reflect the saved verdict and evidence in this report.
Is eaglestonetoy.com a scam or is it safe?
Is eaglestonetoy.com safe to use?
Has eaglestonetoy.com been flagged by antivirus engines?
Is eaglestonetoy.com on any phishing or malware blacklists?
How old is the eaglestonetoy.com domain?
Does eaglestonetoy.com have a valid SSL certificate?
Where is eaglestonetoy.com hosted?
How often is the eaglestonetoy.com report updated?
08 · Final Verdict
Final verdict
EagleStone is a small Shopify toy storefront that sends buyers to Amazon, with no disclosed operator identity
eaglestonetoy.com presents itself as EagleStone, a toy shop running on Shopify, with product pages carrying 'Buy it Now' and 'Buy Now' buttons. Those buttons do not complete a purchase on this site: the commercial link graph shows them pointing to amazon.com and amazon.co.uk, so the storefront works as an affiliate front-end that hands the actual transaction to Amazon. The domain is over six years old and the saved checks found no malware, no Safe Browsing warning and a valid encrypted connection, which is why this is not rated as a dangerous site. What holds the score in the moderate band is the operator side: the site publishes no postal address or legal entity, its only contact is a generic service@ mailbox on its own domain plus a phone number, and its About-us wording matches a template used by unrelated shops. Nothing in the evidence shows a fake checkout, a non-delivery pattern or a payment trap, so the concern is transparency and the off-site purchase path rather than proven fraud.
09 · Community
Community
Are you the owner of eaglestonetoy.com?Verify and reply