Is get-reaper.com safe?
http://get-reaper.com/
Checked on
How we checked
Coverage: strong · 5 of 6 applicable core capabilities
- Antivirus (59 of 93 engines answered) · saved result: did not fully complete
- Google Safe Browsing: completed
- page reading: completed
- page capture: completed
- domain records: completed
- web research: completed
Shopify supplement shop with a named lifter's brand story, but no company, address or phone behind it and low-trust ratings from two site-checking services
get-reaper.com is a Shopify storefront selling pre-workout, a pump product and lifting wraps in pounds sterling, presented as the personal brand of lifter 'Baker (@bigboybake)' with 'As Used By Mitchell Hooper' badges. The shop itself is coherent: every buy button we captured leads to a product or collection page on the same domain, there is no cross-site checkout, no popup download and no notification prompt. What holds the score in the moderate band is the operator side: no company name, registration number, postal address or phone number appears on the captured pages, the only contact is sales@get-reaper.com, the 'Order Problem?' support page failed to load, and two independent site-checking services rate the domain as low trust or a suspicious shop. Nothing we reviewed shows a customer who paid and got nothing, so this is a caution verdict rather than a confirmed fraud finding.
Saved site captureCaptured safely during this scan1 antivirus engine flagged this URLGridinsoftSaved antivirus result from Nov 1, 2026At a glance
Saved with this scan; each value is explained in the sections below.
Domain age
1.8 years old
Registered Jan 5, 2025Expires Jan 5, 2027Certificate
Valid
Expires Feb 9, 2027 (88d)Hosting
Canada (CA)
Shopify, Inc.Popularity
Not in the Cloudflare Radar top list
Antivirus
1/59
1 antivirus engine flagged this URLSafe Browsing
Not flagged
Not flagged on major threat listsCommunity
No reviews yet
Checked
Nov 12, 2026
Where this site sits
- Dangerous1–20
- High Risk21–44
- Moderate Risk45–69
- Low Risk70–84
- Safe85–100
The score combines saved evidence strength and analysis quality. Coverage is reported separately.
Why 62/100
Moderate Risk covers scores 45–69. 5 findings pulled the score down; 2 pushed it up.
What pulled the score down
- Moderate2 independent sources carry complaints or warnings about this site, including: "In summary, get-reaper.com has a very low trust score which indicates that there is a strong likelyhood the website is a scam."
- Moderate2 independent sources carry complaints or warnings about this site, including: "This site is classified as Suspicious Shop based on multiple risk signals, including 2 blacklist detections and no established public user-review history."
- ModerateThe header 'Order Problem?' link points to a support page that failed to load during capture.
- Moderate1 antivirus result marked the URL as suspicious. This comes from a saved antivirus observation rather than a new submission, so treat the detection as real but confirm the timing.
- MinorNo company name, registration number, postal address or phone number is published; contact is limited to sales@get-reaper.com.
What pushed the score up
- SupportsThe domain was registered on 5 January 2025 and is about 1 year 10 months old, with ownership details withheld.
- SupportsThe browser threat feed returned no warning and the TLS connection is valid; one stale engine hit is the only adverse technical signal.
No points per finding are stored for this report: our analysis weighed all findings together to set the score. Each finding shows its saved severity instead (Decisive, Strong, Moderate or Minor).
01 · Investigation Brief
Investigation Brief
get-reaper.com is a Shopify storefront selling pre-workout, a pump product and lifting wraps in pounds sterling, presented as the personal brand of lifter 'Baker (@bigboybake)' with 'As Used By Mitchell Hooper' badges. The shop itself is coherent: every buy button we captured leads to a product or collection page on the same domain, there is no cross-site checkout, no popup download and no notification prompt. What holds the score in the moderate band is the operator side: no company name, registration number, postal address or phone number appears on the captured pages, the only contact is sales@get-reaper.com, the 'Order Problem?' support page failed to load, and two independent site-checking services rate the domain as low trust or a suspicious shop. Nothing we reviewed shows a customer who paid and got nothing, so this is a caution verdict rather than a confirmed fraud finding.
Who runs the shop is not stated
The captured pages name no legal entity, no registration number, no postal address and no phone number. The only route to the seller is the domain email sales@get-reaper.com, which is at least on the shop's own domain rather than a free mailbox.
Registration records show the domain was created on 5 January 2025 through GoDaddy with ownership details withheld, and it is now about 1 year 10 months old. A young domain with hidden ownership and no published company details is a real gap for anyone sending money to it, even though none of those facts is proof of fraud on its own.
The persistent 'Order Problem?' link in the header points to a support page that did not load during our capture, so the documented path for resolving a missing or faulty order could not be checked.
Two site-checking services rate the domain poorly
One automated scanner lists get-reaper.com as a possible malware scam, and a second service summarises the domain as having a very low trust score with a strong likelihood of being a scam. A third listing classifies it as a suspicious shop, citing blacklist detections and no established public review history.
Our own saved antivirus observation matches that picture only weakly: one engine out of 93 marked the URL suspicious, and that saved analysis is stale, so it should be read as a single automated heuristic rather than a confirmed infection. The browser threat feed returned no warning and the encrypted connection is valid, which means no technical detection, not that the seller has been vetted.
The buying flow stays on one domain, with conditional returns
Every commercial button we captured — 'Shop Bundles & Save', 'Shop Licked Pre', the per-category 'Shop Now' links and the product 'Shop' links at £24.99 to £35.99 — resolves to a collection or product page on get-reaper.com. No affiliate redirect, cross-domain checkout or third-party payment path appeared in the link graph.
The published refund terms are conditional rather than a trap: returns are accepted only 'where returns are accepted', items must come back unworn and tagged, refunds can be reduced for used goods, and a refund may be withheld until the goods are received back. Cancellations and returns are handled by emailing sales@get-reaper.com.
Shipping terms warn that UK import charges, duties and carrier fees may fall on the customer unless prepaid at checkout, and the homepage carries unverified marketing claims such as 'As Used By Mitchell Hooper' and a '100% Satisfaction Guarantee'. A first-visit survey modal asks how the visitor found the store; it collects no payment or login details.
Why the score is 62
02 · Security Evidence
Security evidence
Antivirus Engines
1/ 93
detectionsSaved analysis from November 1, 2026 - stale
1 engine flagged this URL
Every saved adverse engine is listed below. The full provider matrix remains available for audit.
- Malicious
- 0
- Suspicious
- 1
- Total
- 93
- Suspicious1
- Clean58
- Undetected34
| Engine | Finding |
|---|---|
| GridinsoftSuspicious | suspicious |
All 93 engine results
- Gridinsoft - Suspicious
- 0xSI_f33d - Unrated
- Abusix - Clean
- Acronis - Clean
- ADMINUSLabs - Clean
- AILabs (MONITORAPP) - Clean
- AlienVault - Clean
- alphaMountain.ai - Unrated
- AlphaSOC - Unrated
- Antiy-AVL - Clean
- ArcSight Threat Intelligence - Unrated
- AutoShun - Unrated
- Bfore.Ai PreCrime - Unrated
- BitDefender - Clean
- Bkav - Unrated
- BlockList - Clean
- Blueliv - Clean
- Certego - Clean
- ChainPatrol - Unrated
- Chong Lua Dao - Clean
- CINS Army - Clean
- CRDF - Clean
- Criminal IP - Unrated
- CSIS Security Group - Unrated
- CTX AI - Clean
- Cyan - Unrated
- Cyble - Clean
- CyRadar - Clean
- desenmascara.me - Clean
- DNS8 - Unrated
- Dr.Web - Clean
- EmergingThreats - Clean
- Emsisoft - Clean
- Ermes - Unrated
- ESET - Clean
- ESTsecurity - Clean
- Forcepoint ThreatSeeker - Clean
- Fortinet - Clean
- Fortra - Unrated
- G-Data - Clean
- GCP Abuse Intelligence - Unrated
- Google Safe Browsing - Clean
- GreenSnow - Clean
- GreyNoise - Unrated
- Guardpot - Unrated
- Heimdal Security - Clean
- Hunt.io Intelligence - Unrated
- IPsum - Clean
- Juniper Networks - Clean
- K7AntiVirus - Unrated
- Kaspersky - Clean
- LevelBlue - Clean
- Lionic - Clean
- Lumu - Unrated
- Malwared - Clean
- MalwarePatrol - Clean
- MalwareURL - Unrated
- Mimecast - Unrated
- Netcraft - Unrated
- OpenPhish - Clean
- Orcapot - Unrated
- PhishFort - Unrated
- Phishing Database - Clean
- Phishtank - Clean
- PREBYTES - Clean
- PrecisionSec - Unrated
- Quick Heal - Clean
- Quttera - Clean
- Rising - Clean
- SafeToOpen - Unrated
- Sangfor - Clean
- Sansec eComscan - Unrated
- Scantitan - Clean
- SCUMWARE.org - Clean
- Seclookup - Clean
- Snort IP sample list - Unrated
- SOCRadar - Unrated
- Sophos - Clean
- StopForumSpam - Clean
- Sucuri SiteCheck - Clean
- Synthient - Unrated
- ThreatHive - Clean
- URLhaus - Clean
- URLQuery - Unrated
- Viettel Threat Intelligence - Clean
- VIPRE - Unrated
- ViriBack - Clean
- VX Vault - Clean
- Webroot - Clean
- Xcitium Verdict Cloud - Clean
- Yandex Safebrowsing - Clean
- ZeroCERT - Clean
- ZeroFox - Unrated
How security vendors categorise this site
- Forcepoint ThreatSeekerhosted business applications
- Googleshopping
Each vendor’s own label for the site, saved with the antivirus result. Labels are separate from the engine verdicts above and can disagree with each other.
Security Scans
Checked against the browser threat feeds available to this scan — no hit.
What we observed
Visual context from the captured page
A purple-bordered modal covers the homepage: 'STEP 1 OF 4 — WELCOME TO THE GRAVEYARD — WHERE DID YOU FIND US?' with selectable options '@bigboybake Instagram', 'Google', 'YouTube', 'Other' and a 'Next →' button, plus a close X. The modal asks how the visitor found the store, offering the brand's own Instagram handle (@bigboybake) as an option — a marketing attribution prompt, not a payment or credential request. Background hero reads 'BUILT FOR THE STRONGEST IN THE ROOM' with 'Baker's personal formula. No fillers. No shortcuts... bundles at prices that make stacking a no-brainer' and buttons 'SHOP BUNDLES & SAVE →' and 'SHOP LICKED'. A scrolling strip lists 'AS USED BY MITCHELL HOOPER', '50 FULL SERVINGS PER TUB', 'NO PROPRIETARY BLENDS', '100% SATISFACTION GUARANTEE'. Header shows account and cart icons, an 'ORDER PROBLEM?' link and a 'SHOP BUNDLES' button; a product tub image ('LICKED PRE-WORKOUT') appears at right.
What the captured page showed
5 observations- 01
A purple-bordered modal covers the homepage: 'STEP 1 OF 4 — WELCOME TO THE GRAVEYARD — WHERE DID YOU FIND US?' with selectable options '@bigboybake Instagram', 'Google', 'YouTube', 'Other' and a 'Next →' button, plus a close X.
- 02
The modal asks how the visitor found the store, offering the brand's own Instagram handle (@bigboybake) as an option — a marketing attribution prompt, not a payment or credential request.
- 03
Background hero reads 'BUILT FOR THE STRONGEST IN THE ROOM' with 'Baker's personal formula. No fillers. No shortcuts... bundles at prices that make stacking a no-brainer' and buttons 'SHOP BUNDLES & SAVE →' and 'SHOP LICKED'.
- 04
A scrolling strip lists 'AS USED BY MITCHELL HOOPER', '50 FULL SERVINGS PER TUB', 'NO PROPRIETARY BLENDS', '100% SATISFACTION GUARANTEE'.
- 05
Header shows account and cart icons, an 'ORDER PROBLEM?' link and a 'SHOP BUNDLES' button; a product tub image ('LICKED PRE-WORKOUT') appears at right.
Browser behavior
What our isolated browser recorded while it loaded the page. Host names only: no full addresses are published.
- Pop-ups
- 0
- Download attempts
- 0
- Notification prompts
- 0
- Navigations
- 1
- Other hosts contacted
- 5
Where the page went
- First loadget-reaper.comSame site
Hosts on our aggressive-advertising list
None contacted.
Test clicks
No test click was made on this page.
What the page says about itself
Quoted from the pages we read: the site's own words, not our findings.
- Page title
Reaper
Pages we read
- Main page/Read
- Refund / returns policy/policies/refund-policyRead
- Shipping policy/policies/shipping-policyRead
- Support / FAQ/pages/order-supportCould not be read
03 · Investigation Story
Investigation story
What the site claims
Reaper
What we observed
The page content was captured and checked alongside 59 antivirus results.
What independent research found
6 external findings were saved and compared with the page evidence.
What remains unverified
1 of the 6 applicable core capabilities did not complete, so those gaps remain visible in the coverage ledger.
What kind of site and risk is this?
Threat category
No threat category confirmed
Service and business model
Supplement
Observed behavior
Evidence behind this classification
Web research findings
Independent findings for get-reaper.com, including public complaints, named review sources, registration records, and look-alike-domain evidence.
- ScamAdviseropen
"This website has been reported by Gridinsoft as possible malware"
- ScamAdviseropen
"In summary, get-reaper.com has a very low trust score which indicates that there is a strong likelyhood the website is a scam."
- Gridinsoftopen
"This site is classified as Suspicious Shop based on multiple risk signals, including 2 blacklist detections and no established public user-review history."
- Instagram (topic aggregation page)open
"@getreaper Licked Pre and elbow wraps"
Reputation Sources
How this domain rates across independent threat-intelligence and blocklist providers.
04 · Domain & Infrastructure
Domain & infrastructure
The plumbing behind the site — who registered it, how it’s encrypted, where it’s hosted, and where it links out. A valid certificate or a calm server doesn’t mean the business is honest — scam sites pass these checks too.
Infrastructure map
- Domainget-reaper.com
- Redirects toget-reaper.com
- Hosted byShopify, Inc.
- Referencescdn.shopify.com · fonts.googleapis.comand 5 more
Domain Timeline
- Jan 5, 2025Domain registered
First appeared in WHOIS records — 1.8 years old when this review was saved.
- Nov 12, 2026Saved security review — Rated Moderate Risk
The evidence in this saved scan is mixed or incomplete; the completed checks are detailed above.
Contact Verification
Saved contact details can help identify the operator. Their presence supports traceability; it does not prove the business is trustworthy.
- No phone number listed on the captured page.
- No operator postal address visible on the captured page.
- Contact email on the site's own domain (sales@get-reaper.com).
Domain & Encryption
At the scan on Nov 12, 2026: 93% of the registration period had passed
At the scan on Nov 12, 2026: 2% of the validity period had passed
Certificate issued for get-reaper.com.
A shared content-delivery network address answers for many sites, so it is not the site's own server and says nothing about who runs it.
Scripts, fonts and CDNs
- Google Fonts
Payment providers the page loads
None seen among the outside domains we saved.
Read from the first 20 outside domains the page loads and the shop platform it uses; the web server and platform rows are under Hosting & Technology. A payment script on the page does not prove the shop accepts that method at checkout, or that you are protected.
Redirect Chain
- 1301http://get-reaper.com/
- 2200https://get-reaper.com/
Server Reputation
Referenced Domains
Outbound domains this page links to or loads resources from. Each links to its own security scan.
Grouped by what each domain is for. in page: named in the page’s HTML. contacted: the browser loaded it while rendering the page. ad list: on our aggressive-advertising list.
Payments1
- shop.appcontacted
CDN & fonts5
- cdn.shopify.comin pagecontacted
- fonts.googleapis.comin pagecontacted
- fonts.gstatic.comin pagecontacted
- monorail-edge.shopifysvc.comin page
- otlp-http-production.shopifysvc.comcontacted
Platform & social3
- instagram.comin page
- tiktok.comin page
- youtube.comin page
05 · Evidence Ledger
Evidence ledger
- Antiviruspartial
- Browser threat feedcomplete
- Page contentcomplete
- Analysiscomplete
- Visual evidencecomplete
The conclusion is supported by the evidence saved with this report.
Technical threat
unknownMalware, phishing, credential theft and hostile infrastructure.
Operator / customer risk
suspiciousComplaints, withdrawals, business conduct and commercial traps.
Source coverage and freshness
Status shows whether usable evidence was saved; finding shows what that evidence observed.
| Source | Result | Completion | Finding | Freshness |
|---|---|---|---|---|
| Antivirus | 1 of 93 engines flagged | Limited | Adverse | stale fallback · analysed Nov 1, 2026 |
| Browser protection | No browser threat-list match | Completed | No adverse finding | this scan · Nov 12, 2026 |
| Page content | Page fetched · HTTP 200 | Completed | No adverse finding | this scan · Nov 12, 2026 |
| Visual evidence | 5 visible observations saved with the page capture | Completed | No adverse finding | this scan · Nov 12, 2026 |
| Independent research | 6 independent findings were saved | Completed | Adverse | this scan · Nov 12, 2026 |
- Antivirus
- Result1 of 93 engines flagged
- CompletionLimitedFindingAdverse
- Freshnessstale fallback · analysed Nov 1, 2026
- Browser protection
- ResultNo browser threat-list match
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Nov 12, 2026
- Page content
- ResultPage fetched · HTTP 200
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Nov 12, 2026
- Visual evidence
- Result5 visible observations saved with the page capture
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Nov 12, 2026
- Independent research
- Result6 independent findings were saved
- CompletionCompletedFindingAdverse
- Freshnessthis scan · Nov 12, 2026
07 · Safety FAQ
Safety FAQ
Answered from the saved verdict and evidence in this report.
Is get-reaper.com a scam or is it safe?
Is get-reaper.com safe to use?
Has get-reaper.com been flagged by antivirus engines?
Is get-reaper.com on any phishing or malware blacklists?
How old is the get-reaper.com domain?
Does get-reaper.com have a valid SSL certificate?
Where is get-reaper.com hosted?
How often is the get-reaper.com report updated?
08 · Final Verdict
Final verdict
Shopify supplement shop with a named lifter's brand story, but no company, address or phone behind it and low-trust ratings from two site-checking services
get-reaper.com is a Shopify storefront selling pre-workout, a pump product and lifting wraps in pounds sterling, presented as the personal brand of lifter 'Baker (@bigboybake)' with 'As Used By Mitchell Hooper' badges. The shop itself is coherent: every buy button we captured leads to a product or collection page on the same domain, there is no cross-site checkout, no popup download and no notification prompt. What holds the score in the moderate band is the operator side: no company name, registration number, postal address or phone number appears on the captured pages, the only contact is sales@get-reaper.com, the 'Order Problem?' support page failed to load, and two independent site-checking services rate the domain as low trust or a suspicious shop. Nothing we reviewed shows a customer who paid and got nothing, so this is a caution verdict rather than a confirmed fraud finding.
09 · Community
Community
Are you the owner of get-reaper.com?Verify and reply