Is evanaa.net safe?

A US company name, a Wyoming address, and a Vietnam office

The site's own contact block names 'Brightonx LLC' at 30 N Gould St Ste N, Sheridan, WY 82801, and separately lists a 'Creative Office' at Ngo 223, duong Tan Ha, phuong Minh Xuan, tinh Tuyen Quang, Viet Nam, 220000, with support hours of Monday to Sunday, 9:00 AM to 5:00 PM at UTC-07:00. A company named BRIGHTONX LLC does appear in a Kentucky business record dated 2026-08-07 and marked Active, so the entity name is not invented out of thin air. What the record does not do is tie that Kentucky entity to the operation of this storefront, and the Wyoming-plus-Vietnam footprint is the pattern of a dropshipping or shell-store arrangement rather than a single-location retailer.

One captured page observation notes that no operator postal address was visible on the page that was read, even though the supplemental contact block carries addresses. That is a presentation inconsistency rather than proof of fraud, but it means a visitor cannot easily confirm who is actually behind the storefront from the checkout-facing pages alone.

A very new domain with an adverse shop listing

The registrable domain is 84 days old. Short-lived domains are a common characteristic of shop operations that appear, take orders, and disappear before complaints accumulate, and that timing matters here because it means there is no long track record of fulfilled orders to weigh against the adverse signals.

Independent research lists Evanaa.net as a suspicious shop, and the same source notes that reports in this class often describe payment accepted first and delivery issues later. A second research source records the domain as flagged malicious by a reputation service. These are external adverse findings about this specific host, not a generic category label, and they are the main reason the score is not higher.

A saved antivirus observation records one independent engine returning an adverse result against the domain, attributed to Bfore.Ai PreCrime and Gridinsoft. That observation is marked stale and partial, so it should be read as a real but dated detection rather than a fresh confirmation of current behaviour.

Clean connection, unresolved commercial risk

The saved TLS check found a valid encrypted connection and the browser threat feed returned no threat warning, so there is no evidence of a drive-by infection, a credential-harvesting page, or a malicious download on this host. A visitor's browser connection to the storefront is encrypted in the ordinary way.

The risk that remains is commercial rather than technical. The combination of an 84-day-old domain, an adverse suspicious-shop listing describing payment-then-delivery problems, and a contact footprint split between Wyoming and Vietnam means a buyer has no reliable way to enforce delivery or obtain a refund if the order does not arrive. That is the mechanism behind the High Risk score, not any malware finding.