Is extraprovisions.com safe?
http://extraprovisions.com/
Checked on
How we checked
Coverage: strong · 3 of 4 applicable core capabilities
- Antivirus (58 of 93 engines answered) · saved result: did not fully complete
- Google Safe Browsing: completed
- page reading: completed
- page capture: completed
- domain records: completed
- web research: completed
Brand-new Shopify meal-prep storefront with a free-mail contact address and one stale antivirus flag
Extra Provisions Co. presents itself as a small meal-prep shop built on Shopify, with an Order button, a Cart, and social links to Instagram and TikTok. The storefront itself is technically unremarkable: the saved TLS check found a valid encrypted connection and the browser threat feed returned no threat warning. What holds the score down is the operator side. The registrable domain is only 21 days old, the only contact address is a free Gmail inbox rather than a mailbox on the store's own domain, and no phone number appears on the captured page. One antivirus family also reported an adverse result, though that observation is stale and comes from a saved record rather than a fresh submission. Nothing here proves a specific customer was cheated, and no fake-shop kit markers, refund traps, or cross-domain order paths were found, so this is a caution verdict rather than a confirmed scam.
Loading saved screenshot
Preparing the saved page preview.
Where this site sits
- Dangerous1–20
- High Risk21–44
- Moderate Risk45–69
- Low Risk70–84
- Safe85–100
The score combines saved evidence strength and analysis quality. Coverage is reported separately.
Why 52/100
Moderate Risk covers scores 45–69. 2 findings pulled the score down; 2 pushed it up.
What pulled the score down
- Strong1 independent antivirus family reported an adverse result. This comes from a saved antivirus observation rather than a new submission, so treat the detection as real but confirm the timing.
- ModerateThe store's contact address is a free-mail inbox (gmail.com) rather than a mailbox on its own domain.
What pushed the score up
- SupportsGoogle Safe Browsing returned no threat warning
- SupportsThe saved TLS check found a valid encrypted connection
No points per finding are stored for this report: our analysis weighed all findings together to set the score. Each finding shows its saved severity instead (Decisive, Strong, Moderate or Minor). Community reviews never change the Safety Score.
01 · Investigation Brief
Investigation Brief
Extra Provisions Co. presents itself as a small meal-prep shop built on Shopify, with an Order button, a Cart, and social links to Instagram and TikTok. The storefront itself is technically unremarkable: the saved TLS check found a valid encrypted connection and the browser threat feed returned no threat warning. What holds the score down is the operator side. The registrable domain is only 21 days old, the only contact address is a free Gmail inbox rather than a mailbox on the store's own domain, and no phone number appears on the captured page. One antivirus family also reported an adverse result, though that observation is stale and comes from a saved record rather than a fresh submission. Nothing here proves a specific customer was cheated, and no fake-shop kit markers, refund traps, or cross-domain order paths were found, so this is a caution verdict rather than a confirmed scam.
A very new domain with thin, off-brand contact details
The registrable domain is 21 days old, so there is no trading history behind this storefront and no time for independent reviews to accumulate. A shop that takes orders and card details at three weeks old carries the ordinary risk that it can disappear before any order is fulfilled.
The contact address on the site is a free Gmail inbox, reginaldextra@gmail.com, rather than a mailbox on extraprovisions.com. The page review also notes that no contact email uses the site's own domain, and no phone number is listed on the captured page. For a business collecting payments for prepared food, that leaves a customer with no verifiable way to reach the operator if an order goes wrong.
Clean browser checks, but one stale vendor flag
The technical layer looks ordinary. The saved TLS check found a valid encrypted connection, and the browser threat feed returned no threat warning, so there is no evidence of malware delivery, phishing markup, or a browser-level attack on the captured page.
One independent antivirus family, Bfore.Ai PreCrime, reported an adverse result for the domain. That detection is real but comes from a saved observation rather than a new submission, so its timing is uncertain and it should be weighed as a caution rather than proof of an active threat. It does not, on its own, describe what the site does to a visitor.
Why the score is 52
1 independent antivirus family reported an adverse result. This comes from a saved antivirus observation rather than a new submission, so treat the detection as real but confirm the timing. Coverage remains separate so missing sources cannot be mistaken for clean results.
02 · Security Evidence
Security evidence
Antivirus Engines
1/ 93
detectionsSaved analysis from October 15, 2026 - stale
1 engine flagged this URL
Every saved adverse engine is listed below. The full provider matrix remains available for audit.
- Malicious
- 1
- Suspicious
- 0
- Total
- 93
| Engine | Finding |
|---|---|
| Bfore.Ai PreCrimeMalicious | malicious |
All 93 engine results
- Bfore.Ai PreCrime - Malicious
- 0xSI_f33d - Unrated
- Abusix - Clean
- Acronis - Clean
- ADMINUSLabs - Clean
- AILabs (MONITORAPP) - Clean
- AlienVault - Clean
- alphaMountain.ai - Unrated
- AlphaSOC - Unrated
- Antiy-AVL - Clean
- ArcSight Threat Intelligence - Unrated
- AutoShun - Unrated
- BitDefender - Clean
- Bkav - Unrated
- BlockList - Clean
- Blueliv - Clean
- Certego - Clean
- ChainPatrol - Unrated
- Chong Lua Dao - Clean
- CINS Army - Clean
- CRDF - Clean
- Criminal IP - Unrated
- CSIS Security Group - Unrated
- CTX AI - Clean
- Cyan - Unrated
- Cyble - Clean
- CyRadar - Clean
- desenmascara.me - Clean
- DNS8 - Unrated
- Dr.Web - Clean
- EmergingThreats - Clean
- Emsisoft - Clean
- Ermes - Unrated
- ESET - Clean
- ESTsecurity - Clean
- Forcepoint ThreatSeeker - Clean
- Fortinet - Clean
- Fortra - Unrated
- G-Data - Clean
- GCP Abuse Intelligence - Unrated
- Google Safe Browsing - Clean
- GreenSnow - Clean
- GreyNoise - Unrated
- Gridinsoft - Unrated
- Guardpot - Unrated
- Heimdal Security - Clean
- Hunt.io Intelligence - Unrated
- IPsum - Clean
- Juniper Networks - Clean
- K7AntiVirus - Unrated
- Kaspersky - Unrated
- LevelBlue - Clean
- Lionic - Clean
- Lumu - Unrated
- Malwared - Clean
- MalwarePatrol - Clean
- MalwareURL - Unrated
- Mimecast - Unrated
- Netcraft - Unrated
- OpenPhish - Clean
- Orcapot - Unrated
- PhishFort - Unrated
- Phishing Database - Clean
- Phishtank - Clean
- PREBYTES - Clean
- PrecisionSec - Unrated
- Quick Heal - Clean
- Quttera - Clean
- Rising - Clean
- SafeToOpen - Unrated
- Sangfor - Clean
- Sansec eComscan - Unrated
- Scantitan - Clean
- SCUMWARE.org - Clean
- Seclookup - Clean
- Snort IP sample list - Unrated
- SOCRadar - Unrated
- Sophos - Clean
- StopForumSpam - Clean
- Sucuri SiteCheck - Clean
- Synthient - Unrated
- ThreatHive - Clean
- URLhaus - Clean
- URLQuery - Unrated
- Viettel Threat Intelligence - Clean
- VIPRE - Unrated
- ViriBack - Clean
- VX Vault - Clean
- Webroot - Clean
- Xcitium Verdict Cloud - Clean
- Yandex Safebrowsing - Clean
- ZeroCERT - Clean
- ZeroFox - Unrated
How security vendors categorise this site
- Forcepoint ThreatSeekernewly registered websites
- Googleretail
Each vendor’s own label for the site, saved with the antivirus result. Labels are separate from the engine verdicts above and can disagree with each other.
Security Scans
Checked against the browser threat feeds available to this scan — no hit.
What we observed
Loading saved screenshot
Preparing the saved page preview.
Visual context from the captured page
The website features a high-quality image of a gourmet meal, with navigation links for 'Home', 'Order', 'Contact', and 'Meal Highlights'.
What the captured page showed
1 observation- 01
The website features a high-quality image of a gourmet meal, with navigation links for 'Home', 'Order', 'Contact', and 'Meal Highlights'.
What the page says about itself
What the site says about itself, quoted from the pages we read. The site wrote these words; they are not our findings.
- Page title
Extra Provisions Co. | Meal Plans – Extra Provisions Co. Meal Plans
- Meta description
Restaurant-quality, flavor-forward meal prep designed for your busy week. Bold glazes, signature marinades, and gourmet comfort—without the prep work.
Pages we read
- Main page/Read
- Privacy policy/policies/privacy-policyRead
- Contact page/pages/contactRead
03 · Investigation Story
Investigation story
What the site claims
Extra Provisions Co. | Meal Plans – Extra Provisions Co. Meal Plans
What we observed
The page content was captured and checked alongside 58 antivirus results.
What independent research found
The search completed without a material external warning or corroborating report.
What remains unverified
1 of the 4 applicable core capabilities did not complete, so those gaps remain visible in the coverage ledger.
If this is a scam — what it means for you
What a visitor actually does here
A visitor arriving on the page sees a gourmet meal image with navigation for Home, Order, Contact and Meal Highlights, and can click Order or add items to a Cart. Those are same-site, transactional actions: the money path stays on extraprovisions.com rather than being handed to a separate checkout domain.
If this is a scam, how it works
The evidence-backed path
Each stage below is preserved from the grounded analysis and linked to saved evidence.
The storefront runs on Shopify, and the page carries Shopify's own cookie-policy link and a Global Privacy Control link, which is the standard platform furniture of a hosted shop rather than a custom-built checkout. The only outbound links are to Instagram and TikTok, which are social profiles, not payment or order destinations.
The practical exposure is therefore the order itself: a shopper would be paying a 21-day-old storefront whose only contact route is a Gmail address and which lists no phone number. If the order is not delivered, there is no established reputation or verifiable business contact to fall back on.
Treat this as an unproven new storefront rather than a confirmed scam. If you want to order, use a payment method with buyer protection such as a credit card or PayPal rather than a bank transfer or gift card, keep the order small at first, and save the confirmation emails. Before paying, try the Gmail address and the Instagram or TikTok profiles and see whether anyone answers and whether the profiles show real, dated activity. If you cannot get a reply, or the site asks you to pay outside the Shopify checkout, walk away.
Web research findings
Independent findings for extraprovisions.com, including public complaints, named review sources, registration records, and look-alike-domain evidence. A missing result is shown as unverified, never converted into a clean bill of health.
No independently sourced scam reports or credibility records were found for extraprovisions.com. That is common for new or low-traffic sites and does not clear the site.
Reputation Sources
How this domain rates across independent threat-intelligence and blocklist providers.
04 · Domain & Infrastructure
Domain & infrastructure
The plumbing behind the site — who registered it, how it’s encrypted, where it’s hosted, and where it links out. A valid certificate or a calm server doesn’t mean the business is honest — scam sites pass these checks too. Use this to corroborate the verdict, not to overturn it.
Infrastructure map
How the saved page connected to the wider web.
- Domainextraprovisions.com
- Redirects toextraprovisions.com
- Hosted byShopify, Inc.
- Referencesfonts.shopifycdn.com · shop.app
Domain Timeline
- Sep 30, 2026Domain registered
First appeared in WHOIS records — 21 days old when this review was saved.
- Oct 22, 2026Saved security review — Rated Moderate Risk
The evidence in this saved scan is mixed or incomplete; the completed checks are detailed above.
extraprovisions.com was registered very recently when this review was saved. Freshly-registered domains are disproportionately used for scams, so a young domain whose evidence is mixed or incomplete warrants extra caution.
Contact Verification
Saved contact details can help identify the operator. Their presence supports traceability; it does not prove the business is trustworthy.
- No contact email uses the site's own domain.
- Business contact uses a free-mail provider (gmail.com).
- No phone number listed on the captured page.
- Postal address visible on the page.
- Links to 6 social profiles.
Domain & Encryption
A certificate issued weeks or days before the scan on a domain registered recently is common on short-lived sites, though new legitimate sites look the same.
Certificate issued for extraprovisions.com.
A shared content-delivery network address answers for many sites, so it is not the site's own server and says nothing about who runs it.
Payment providers the page loads
- Shop Pay
Read from the first 20 outside domains the page loads and the shop platform it uses; the web server and platform rows are under Hosting & Technology. A payment script on the page does not prove the shop accepts that method at checkout, or that you are protected.
Redirect Chain
- 1301http://extraprovisions.com/
- 2200https://extraprovisions.com/
Server Reputation
Referenced Domains
Outbound domains this page links to or loads resources from. Each links to its own security scan.
05 · Evidence Ledger
Evidence ledger
- Antiviruspartial
- Browser threat feedcomplete
- Page contentcomplete
- Analysiscomplete
- Visual evidencecomplete
The conclusion is supported by the evidence saved with this report.
Technical threat
suspiciousMalware, phishing, credential theft and hostile infrastructure.
1 independent antivirus family reported an adverse result. This comes from a saved antivirus observation rather than a new submission, so treat the detection as real but confirm the timing.
Operator / customer risk
suspiciousComplaints, withdrawals, business conduct and commercial traps.
The store's contact address is a free-mail inbox (gmail.com) rather than a mailbox on its own domain.
Source coverage and freshness
Status shows whether usable evidence was saved; finding shows what that evidence observed.
| Source | Result | Completion | Finding | Freshness |
|---|---|---|---|---|
| Antivirus | 1 of 93 engines flagged | Limited | Adverse | stale fallback · analysed Oct 15, 2026 |
| Browser protection | No browser threat-list match | Completed | No adverse finding | this scan · Oct 22, 2026 |
| Page content | Page fetched · HTTP 200 | Completed | No adverse finding | this scan · Oct 22, 2026 |
| Visual evidence | 1 visible observation saved with the page capture | Completed | No adverse finding | this scan · Oct 22, 2026 |
| Independent research | The search completed without a material external finding | Completed | No adverse finding | this scan · Oct 22, 2026 |
- Antivirus
- Result1 of 93 engines flagged
- CompletionLimitedFindingAdverse
- Freshnessstale fallback · analysed Oct 15, 2026
- Browser protection
- ResultNo browser threat-list match
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Oct 22, 2026
- Page content
- ResultPage fetched · HTTP 200
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Oct 22, 2026
- Visual evidence
- Result1 visible observation saved with the page capture
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Oct 22, 2026
- Independent research
- ResultThe search completed without a material external finding
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Oct 22, 2026
07 · Safety FAQ
Safety FAQ
Common questions, answered directly from the scan data above — so the answers reflect the saved verdict and evidence in this report.
Is extraprovisions.com a scam or is it safe?
Is extraprovisions.com safe to use?
Has extraprovisions.com been flagged by antivirus engines?
Is extraprovisions.com on any phishing or malware blacklists?
How old is the extraprovisions.com domain?
Does extraprovisions.com have a valid SSL certificate?
Where is extraprovisions.com hosted?
How often is the extraprovisions.com report updated?
08 · Final Verdict
Final verdict
Brand-new Shopify meal-prep storefront with a free-mail contact address and one stale antivirus flag
Extra Provisions Co. presents itself as a small meal-prep shop built on Shopify, with an Order button, a Cart, and social links to Instagram and TikTok. The storefront itself is technically unremarkable: the saved TLS check found a valid encrypted connection and the browser threat feed returned no threat warning. What holds the score down is the operator side. The registrable domain is only 21 days old, the only contact address is a free Gmail inbox rather than a mailbox on the store's own domain, and no phone number appears on the captured page. One antivirus family also reported an adverse result, though that observation is stale and comes from a saved record rather than a fresh submission. Nothing here proves a specific customer was cheated, and no fake-shop kit markers, refund traps, or cross-domain order paths were found, so this is a caution verdict rather than a confirmed scam.
09 · Community
Community
Are you the owner of extraprovisions.com?Verify and reply