Is grace-bags.com safe?

The shop is gone; the domain is parked

The page returned at scan time is only the text 'Loading . . .', and the rendered screenshot shows a plain white page headed 'grace-bags.com' with nine rounded category buttons such as Music and Audio, Business and Finance and Shopping, plus a footer reading '© 2026 ParkLogic.com. All rights reserved.' That is a domain-parking page, not a merchant storefront.

No product listings, prices, cart, checkout or payment buttons appear anywhere on the rendered page, and the commercial link graph is empty, so there is no purchase path to follow at this address today. The domain itself is about 2 years 2 months old, registered 2024-09-03, so this is an older domain that has changed use rather than a brand-new throwaway.

What buyers reported about the shop

A Better Business Bureau Scam Tracker entry describes ordering two black travel bags on 4 July 2025 and receiving only one on 22 July 2025. A second entry says the shop displayed high-quality handmade leather goods but delivered cheap plastic machine-made items, and that support refused a cancellation request made by email, the only contact method offered.

An independent review platform's reviews describe the returns policy as a con that only accepts returns shipped to China and offers partial refunds if the buyer keeps the bag, say the site does not disclose that the bags are made in China and are not leather, and report a 'track my order' link that goes nowhere. The shop is rated 'Bad' at 1.6 out of 5 on an independent review platform, and a separate aggregator records 693 reviews averaging 2.2 stars.

A security vendor listing marks grace-bags.com as a suspicious shop, with typical complaints about payment without delivery, wrong goods or low-quality fakes. These are third-party reports about the storefront rather than behaviour we could observe on the current parked page, but they are consistent with each other and with the shop no longer existing.

Clean connection checks do not clear the operator

The browser threat feed returned no threat warning and the hosting IP carries an abuse confidence score of 0/100 across zero saved reports, so nothing on the current infrastructure suggests malware or active phishing delivery. The saved antivirus observation is different: eight engine families reported an adverse result with phishing and fraud categories, though that observation is stale and describes the domain's reputation rather than the inert parking stub.

The address was served over plain HTTP and the saved TLS check did not validate, so no verified encrypted channel was observed. The contact details on the page were not reviewed in full, so we cannot say what the operator discloses; the risk here comes from the documented customer record, not from a technical detection.