Is geschenk-gut.de safe?
http://geschenk-gut.de/
Checked on
How we checked
Coverage: strong · 5 of 6 applicable core capabilities
- Antivirus (57 of 93 engines answered) · saved result: did not fully complete
- Google Safe Browsing: completed
- page reading: completed
- page capture: completed
- domain records: completed
- web research: completed
German-looking Christmas gift shop built on a known fake-shop storefront platform, with buyers reporting US-origin shipping, surprise customs charges and non-delivery
geschenk-gut.de sells Christmas toys, gifts, tree decorations and clothing in German, with euro pricing and a German-language checkout. The storefront is loaded from esashop.top, a platform used by a known fake-shop network, and the site's own terms still contain an untranslated Chinese template placeholder. Buyers on an independent review platform describe goods shipped from the USA, extra customs charges, unanswered emails and one order that never arrived, and the profile sits around 2 out of 5. Technical checks are clean, but the operator and delivery side is not, so the site lands in the High Risk band.
Saved site captureCaptured safely during this scan1 antivirus engine flagged this URLGridinsoftSaved antivirus result from Oct 24, 2026Where this site sits
- Dangerous1–20
- High Risk21–44
- Moderate Risk45–69
- Low Risk70–84
- Safe85–100
The score combines saved evidence strength and analysis quality. Coverage is reported separately.
Why 15/100
Dangerous covers scores 1–20. 6 findings pulled the score down; 3 pushed it up.
Score ceiling 15: Safety Score limited to 15 (Dangerous): the store runs on esashop.top, the storefront platform of a known fake-shop network on which MalwareTips has documented hundreds of fake stores. (Our analysis had scored it 30.)
What pulled the score down
- StrongThe store runs on esashop.top, a storefront platform used by a known fake-shop network, on a domain of unknown age.
- Moderate2 independent sources carry complaints or warnings about this site, including: "Nicht ersichtlich, dass die Ware aus USA kommt..9.12.24 wurde sie in Tucson losgeschickt, nach 4Wochen war sie dann in Berlin und seit 2Wochen sei"etwas damig…"
- Moderate2 independent sources carry complaints or warnings about this site, including: "Ich hab dort bestellt und bezahlt. Ware wurde nie erhalten und dann Funkstille von dort."
- ModerateThe terms of sale contain an unfilled Chinese placeholder, "【Zahlungsziel,如 14】", in the payment-deadline clause.
- Moderate1 antivirus result marked the URL as suspicious. This comes from a saved antivirus observation rather than a new submission, so treat the detection as real but confirm the timing.
- MinorNo phone number and no operator postal address appear on the captured pages; contact is only support@geschenk-gut.de.
What pushed the score up
- SupportsThe browser threat feed returned no threat warning and the saved TLS check found a valid encrypted connection.
- SupportsThe Internet Archive holds home-page captures from 2024 through 2025, first on March 27, 2024; the .de registry gives no registration date.
- SupportsThe shop publishes a 14-day withdrawal right, a shipping policy with stated timeframes and a contact page on its own domain.
No points per finding are stored for this report: our analysis weighed all findings together to set the score. Each finding shows its saved severity instead (Decisive, Strong, Moderate or Minor).
Lost money or shared details on geschenk-gut.de? Do this now
Act quickly: the first hours matter most for a chargeback.
- Call your bank or card issuer now
Ask them to dispute the charge or open a chargeback; the sooner you act, the better your odds. Card payments can often be reversed. Bank transfers and gift cards are harder, but report them to your bank too. Crypto payments usually cannot be reversed: report the wallet address and transaction ID to the exchange you sent from.
- Change any password you entered
If you entered a password on geschenk-gut.de, change it there and anywhere you reused it, and turn on two-factor authentication. Keep screenshots, order confirmations and messages as evidence.
- Report the site
Reports help get scam sites taken down faster and warn other people.
- Report the domain to its registrar
The registrar is the company that sold this domain. ICANN's lookup shows the registrar's abuse contact.
- Ignore anyone offering to recover your money
"Recovery" services or agents who contact you, or ask for a fee up front, are almost always a second scam aimed at victims. Your bank's dispute process and the official reporting services never charge a fee in advance.
Full answers about refunds and reporting are in the Safety FAQ below.
01 · Investigation Brief
Investigation Brief
geschenk-gut.de sells Christmas toys, gifts, tree decorations and clothing in German, with euro pricing and a German-language checkout. The storefront is loaded from esashop.top, a platform used by a known fake-shop network, and the site's own terms still contain an untranslated Chinese template placeholder. Buyers on an independent review platform describe goods shipped from the USA, extra customs charges, unanswered emails and one order that never arrived, and the profile sits around 2 out of 5. Technical checks are clean, but the operator and delivery side is not, so the site lands in the High Risk band.
The storefront comes from a fake-shop platform, and the legal text was never localised
The page loads its storefront from esashop.top, a platform used by a known fake-shop network. That is a build-level fact about how this shop was assembled, not a guess from its category or its domain age.
The terms of sale are copied boilerplate: the payment-deadline clause still carries the Chinese placeholder text "【Zahlungsziel,如 14】" where a German number of days should be. A shop that reviewed its own German legal text would not publish that.
Who runs the shop is not disclosed on the captured pages: there is no phone number and no operator postal address, only a support mailbox on the site's own domain. A third-party profile for the domain lists an Indianapolis address and calls the business a global e-commerce platform, which does not match a German local gift shop.
Buyers describe US shipping, customs surcharges and silence after payment
Reviewers on the domain's an independent review platform's profile, which is rated about 2 out of 5, describe a German-looking website whose parcels actually left from Tucson, Arizona, with the goods then held or checked by US customs and emails left unanswered.
Other reviewers say payment went to a PayPal account registered in Singapore, that a higher amount was charged than the invoice showed, that delivery took an extremely long time and that a product broke within days. One buyer states plainly that the goods were paid for and never received, followed by silence from the shop.
A further reviewer reports writing to the shop and getting no answer, and characterises the operation as fraudulent. These are customer accounts published on review platforms; our review did not independently verify any individual order.
Clean connection checks do not make the shop safe to buy from
Nothing malicious was found in the connection itself: the browser threat feed returned no warning, the saved TLS check found a valid encrypted connection, and the hosting IP carries an abuse confidence score of 0 out of 100. One saved antivirus result marked the URL as suspicious, and that scan is stale, so it is a weak signal rather than a current detection.
The site has been archived since March 2024, so it is not a brand-new domain, and the .de registry gives no registration date. Age alone does not vouch for the operator, and here the operator side is the problem: undisclosed ownership, copied legal text and a storefront platform tied to a fake-shop network.
In the shop's favour, it does publish a 14-day withdrawal right, a shipping policy with stated processing and delivery windows, and a contact page, and the checkout is described as a direct purchase with PayPal, credit card and Sofortüberweisung rather than a subscription. The only tracked commercial link, "SENDUNG VERFOLGEN", stays on the same domain for order tracking.
Why the score is 15
Safety Score limited to 15 (Dangerous): the store runs on esashop.top, the storefront platform of a known fake-shop network on which MalwareTips has documented hundreds of fake stores.
02 · Security Evidence
Security evidence
Antivirus Engines
1/ 93
detectionsSaved analysis from October 24, 2026 - stale
1 engine flagged this URL
Every saved adverse engine is listed below. The full provider matrix remains available for audit.
- Malicious
- 0
- Suspicious
- 1
- Total
- 93
| Engine | Finding |
|---|---|
| GridinsoftSuspicious | suspicious |
All 93 engine results
- Gridinsoft - Suspicious
- 0xSI_f33d - Unrated
- Abusix - Clean
- Acronis - Clean
- ADMINUSLabs - Clean
- AILabs (MONITORAPP) - Clean
- AlienVault - Clean
- alphaMountain.ai - Unrated
- AlphaSOC - Unrated
- Antiy-AVL - Clean
- ArcSight Threat Intelligence - Unrated
- AutoShun - Unrated
- Bfore.Ai PreCrime - Unrated
- BitDefender - Clean
- Bkav - Unrated
- BlockList - Clean
- Blueliv - Clean
- Certego - Clean
- ChainPatrol - Unrated
- Chong Lua Dao - Unrated
- CINS Army - Clean
- CRDF - Clean
- Criminal IP - Unrated
- CSIS Security Group - Unrated
- CTX AI - Clean
- Cyan - Unrated
- Cyble - Clean
- CyRadar - Clean
- desenmascara.me - Clean
- DNS8 - Unrated
- Dr.Web - Clean
- EmergingThreats - Clean
- Emsisoft - Clean
- Ermes - Unrated
- ESET - Clean
- ESTsecurity - Clean
- Forcepoint ThreatSeeker - Unrated
- Fortinet - Clean
- Fortra - Unrated
- G-Data - Clean
- GCP Abuse Intelligence - Unrated
- Google Safe Browsing - Clean
- GreenSnow - Clean
- GreyNoise - Unrated
- Guardpot - Unrated
- Heimdal Security - Clean
- Hunt.io Intelligence - Unrated
- IPsum - Clean
- Juniper Networks - Clean
- K7AntiVirus - Unrated
- Kaspersky - Clean
- LevelBlue - Clean
- Lionic - Clean
- Lumu - Unrated
- Malwared - Clean
- MalwarePatrol - Clean
- MalwareURL - Unrated
- Mimecast - Unrated
- Netcraft - Unrated
- OpenPhish - Clean
- Orcapot - Unrated
- PhishFort - Unrated
- Phishing Database - Clean
- Phishtank - Clean
- PREBYTES - Clean
- PrecisionSec - Unrated
- Quick Heal - Clean
- Quttera - Clean
- Rising - Clean
- SafeToOpen - Unrated
- Sangfor - Clean
- Sansec eComscan - Unrated
- Scantitan - Clean
- SCUMWARE.org - Clean
- Seclookup - Clean
- Snort IP sample list - Unrated
- SOCRadar - Unrated
- Sophos - Clean
- StopForumSpam - Clean
- Sucuri SiteCheck - Clean
- Synthient - Unrated
- ThreatHive - Clean
- URLhaus - Clean
- URLQuery - Unrated
- Viettel Threat Intelligence - Clean
- VIPRE - Unrated
- ViriBack - Clean
- VX Vault - Clean
- Webroot - Clean
- Xcitium Verdict Cloud - Clean
- Yandex Safebrowsing - Clean
- ZeroCERT - Clean
- ZeroFox - Unrated
How security vendors categorise this site
- Googleshopping
Each vendor’s own label for the site, saved with the antivirus result. Labels are separate from the engine verdicts above and can disagree with each other.
Security Scans
Checked against the browser threat feeds available to this scan — no hit.
What we observed
Visual context from the captured page
Header shows a red 'GESCHENK-GUT' wordmark with a small tree icon, a EUR currency selector and 'Deutsche' language selector. Top red banner reads 'KAUFEN SIE MEHR, SPAREN SIE MEHR' (buy more, save more) — a volume-discount upsell message. Menu items: HOME, WEIHNACHTSSPIELZEUG, WEIHNACHTSGESCHENKE, WEIHNACHTSBAUMSCHMUCK, WEIHNACHTSKLEIDUNG (marked 'HEISS'), SENDUNG VERFOLGEN. Hero image shows a decorated Christmas tree, fireplace and wrapped gifts with headline 'Frohe Festzeit' and a red 'Festlich Shoppen' button. Hero artwork appears to be AI-generated/stock-style seasonal imagery with cartoon Christmas tree and reindeer illustrations layered on top.
What the captured page showed
5 observations- 01
Header shows a red 'GESCHENK-GUT' wordmark with a small tree icon, a EUR currency selector and 'Deutsche' language selector.
- 02
Top red banner reads 'KAUFEN SIE MEHR, SPAREN SIE MEHR' (buy more, save more) — a volume-discount upsell message.
- 03
Menu items: HOME, WEIHNACHTSSPIELZEUG, WEIHNACHTSGESCHENKE, WEIHNACHTSBAUMSCHMUCK, WEIHNACHTSKLEIDUNG (marked 'HEISS'), SENDUNG VERFOLGEN.
- 04
Hero image shows a decorated Christmas tree, fireplace and wrapped gifts with headline 'Frohe Festzeit' and a red 'Festlich Shoppen' button.
- 05
Hero artwork appears to be AI-generated/stock-style seasonal imagery with cartoon Christmas tree and reindeer illustrations layered on top.
What the page says about itself
Quoted from the pages we read: the site's own words, not our findings.
- Page title
Geschenk-gut
- Meta description
- The same text as the page title
Pages we read
- Main page/Read
- Terms/pages/agbRead
- Refund / returns policy/policies/refund-policyRead
- Shipping policy/policies/shipping-policyRead
- Contact page/pages/kontakt-2-2Read
03 · Investigation Story
Investigation story
What the site claims
Geschenk-gut
What we observed
The page content was captured and checked alongside 57 antivirus results.
What independent research found
7 external findings were saved and compared with the page evidence.
What remains unverified
1 of the 6 applicable core capabilities did not complete, so those gaps remain visible in the coverage ledger.
What kind of site and risk is this?
Threat category
Fake Shop & Commercial Deception
Service and business model
Shop
Observed behavior
Evidence behind this classification
- 01The store runs on esashop.top, a storefront platform used by a known fake-shop network, on a domain of unknown age.
- 02The terms of sale contain an unfilled Chinese placeholder, "【Zahlungsziel,如 14】", in the payment-deadline clause.
- 03No phone number and no operator postal address appear on the captured pages; contact is only support@geschenk-gut.de.
Risk pattern correlation
Web research findings
Independent findings for geschenk-gut.de, including public complaints, named review sources, registration records, and look-alike-domain evidence.
- Trustpilot (ch.trustpilot.com)open
"Nicht ersichtlich, dass die Ware aus USA kommt..9.12.24 wurde sie in Tucson losgeschickt, nach 4Wochen war sie dann in Berlin und seit 2Wochen sei"etwas damig nicht in Ordnung" ich solle mich bei meinem Postamt melden...? Dort weiß niemand etwas davon, mails werden nicht beantwortet.... NEVER AGAIN!!!"
- Trustpilot (nl-be.trustpilot.com)open
"Ich habe dsbzgl auch geschenk-gut.de angeschrieben ... aber keine Antwort erhalten. Es dürfte sich dabei um betrügerische Machenschaften handeln !"
- Trustpilot (nl-be.trustpilot.com)open
"Do not buy here! It looks like a german website, the payment was done to "Paypal Signapore" and then the goods were "checked by USA customs"."
- Trustpilot (se.trustpilot.com)open
"Nicht zu empfehlen, erst wurde ein höherer Betrag abgebucht als auf der Rechnung, dann Versand dauerte irre lange, Produkt Flaschenverschluss dann nach wenigen Tagen kaputt!"
- gutefrage.net user profileopen
"Ich hab dort bestellt und bezahlt. Ware wurde nie erhalten und dann Funkstille von dort."
- Trustpilot (ch.trustpilot.com)open
"Geschenk Gut wird auf Trustpilot mit 2 von 5 als „Mangelhaft“ bewertet"
Reputation Sources
How this domain rates across independent threat-intelligence and blocklist providers.
04 · Domain & Infrastructure
Domain & infrastructure
The plumbing behind the site — who registered it, how it’s encrypted, where it’s hosted, and where it links out. A valid certificate or a calm server doesn’t mean the business is honest — scam sites pass these checks too.
Infrastructure map
- Domaingeschenk-gut.de
- Redirects towww.geschenk-gut.de
- Hosted byCloudflare, Inc.
Contact Verification
Saved contact details can help identify the operator. Their presence supports traceability; it does not prove the business is trustworthy.
- No phone number listed on the captured page.
- No operator postal address visible on the captured page.
- Contact email on the site's own domain (support@geschenk-gut.de).
Domain & Encryption
Certificate issued for www.geschenk-gut.de.
A shared Cloudflare address answers for many sites, so it is not the site's own server and says nothing about who runs it.
Site platform
- Shop platform assets from esashop.top
Payment providers the page loads
None seen among the outside domains we saved.
Read from the first 20 outside domains the page loads and the shop platform it uses; the web server and platform rows are under Hosting & Technology. A payment script on the page does not prove the shop accepts that method at checkout, or that you are protected.
Redirect Chain
- 1301http://geschenk-gut.de/
- 2301https://geschenk-gut.de/
- 3200https://www.geschenk-gut.de/
Server Reputation
05 · Evidence Ledger
Evidence ledger
- Antiviruspartial
- Browser threat feedcomplete
- Page contentcomplete
- Analysiscomplete
- Visual evidencecomplete
The conclusion is supported by the evidence saved with this report.
Technical threat
unknownMalware, phishing, credential theft and hostile infrastructure.
1 antivirus result marked the URL as suspicious. This comes from a saved antivirus observation rather than a new submission, so treat the detection as real but confirm the timing.
Operator / customer risk
suspiciousComplaints, withdrawals, business conduct and commercial traps.
The store runs on esashop.top, a storefront platform used by a known fake-shop network, on a domain of unknown age. · 2 independent sources carry complaints or warnings about this site, including: "Nicht ersichtlich, dass die Ware aus USA kommt..9.12.24 wurde sie in Tucson losgeschickt, nach 4Wochen war sie dann in Berlin und seit 2Wochen sei"etwas damig…"
Source coverage and freshness
Status shows whether usable evidence was saved; finding shows what that evidence observed.
| Source | Result | Completion | Finding | Freshness |
|---|---|---|---|---|
| Antivirus | 1 of 93 engines flagged | Limited | Adverse | stale fallback · analysed Oct 24, 2026 |
| Browser protection | No browser threat-list match | Completed | No adverse finding | this scan · Nov 5, 2026 |
| Page content | Page fetched · HTTP 200 | Completed | No adverse finding | this scan · Nov 5, 2026 |
| Visual evidence | 5 visible observations saved with the page capture | Completed | No adverse finding | this scan · Nov 5, 2026 |
| Independent research | 7 independent findings were saved | Completed | Adverse | this scan · Nov 5, 2026 |
- Antivirus
- Result1 of 93 engines flagged
- CompletionLimitedFindingAdverse
- Freshnessstale fallback · analysed Oct 24, 2026
- Browser protection
- ResultNo browser threat-list match
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Nov 5, 2026
- Page content
- ResultPage fetched · HTTP 200
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Nov 5, 2026
- Visual evidence
- Result5 visible observations saved with the page capture
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Nov 5, 2026
- Independent research
- Result7 independent findings were saved
- CompletionCompletedFindingAdverse
- Freshnessthis scan · Nov 5, 2026
07 · Safety FAQ
Safety FAQ
Answered from the saved verdict and evidence in this report.
Is geschenk-gut.de a scam or a legit online store?
Is geschenk-gut.de safe to use?
What should I do if I already gave my details to geschenk-gut.de?
Can I get my money back from geschenk-gut.de?
I ordered from geschenk-gut.de but nothing arrived — is it a fake shop?
How do I report geschenk-gut.de?
Why does geschenk-gut.de look legitimate if it's a scam?
Has geschenk-gut.de been flagged by antivirus engines?
Is geschenk-gut.de on any phishing or malware blacklists?
How old is the geschenk-gut.de domain?
Where is geschenk-gut.de hosted?
How often is the geschenk-gut.de report updated?
08 · Final Verdict
Final verdict
German-looking Christmas gift shop built on a known fake-shop storefront platform, with buyers reporting US-origin shipping, surprise customs charges and non-delivery
geschenk-gut.de sells Christmas toys, gifts, tree decorations and clothing in German, with euro pricing and a German-language checkout. The storefront is loaded from esashop.top, a platform used by a known fake-shop network, and the site's own terms still contain an untranslated Chinese template placeholder. Buyers on an independent review platform describe goods shipped from the USA, extra customs charges, unanswered emails and one order that never arrived, and the profile sits around 2 out of 5. Technical checks are clean, but the operator and delivery side is not, so the site lands in the High Risk band.
09 · Community
Community
Are you the owner of geschenk-gut.de?Verify and reply