Is hollydrapes.store safe?

Who runs the store is not disclosed

The terms page says the store is hosted by Shopify and directs all questions to marcmadridshopify@gmail.com; the contact page repeats the same Gmail address and nothing else. Our review of the site found no phone number and no operator postal address on the captured pages, and the header navigation shows no company details or social profiles either.

The domain itself was registered through Tucows on 7 November 2026 and was four days old at the time of our review, so there is no operating history to check against. A free-mail inbox plus no address or phone on a days-old domain means a buyer has no reliable way to identify, contact or pursue the seller if an order goes wrong.

Sale countdown and review count on a brand-new shop

The product page carries a star rating of "(1831 Reviews)" next to the product title, and the homepage banner runs an "EARLY BLACK FRIDAY" countdown with "Up to 35% off · Free shipping worldwide". Testimonial quotes are attributed to named customers such as Amanda Johnson of Minneapolis, Minnesota.

A shop that has existed for four days cannot have accumulated 1,831 genuine reviews, and the countdown discount is a standard pressure device rather than a dated promotion. We cannot confirm the testimonials are fabricated, but nothing on the site substantiates them, so treat the review count and the sale timer as marketing claims rather than evidence of a track record.

Independent research surfaced a scanner listing that rates the store as a suspicious shop with a trust score of 1/100, citing blacklist hits, the very new domain and the absence of a stable public review history. That is a third-party risk rating, not a customer complaint, but it points the same way as the site's own disclosures.

Clean technical checks, unresolved commercial risk

The browser threat feed returned no threat warning, the TLS certificate is valid, and the Shopify hosting IP carries an abuse confidence score of 0/100. One antivirus engine, alphaMountain.ai, marked the URL as suspicious, which is consistent with a newly registered domain rather than with malware on the page.

The purchase path stays on the store's own domain: the "ADD TO CART" button posts to the site's cart with tiered bundles (1 Pro Set CA$65.00, 2 Pro Sets CA$120.90, 3 Pro Sets CA$161.85) and a "Secure checkout" link to the same site's cart. No cross-domain payment page, affiliate redirect or third-party merchant was observed; the only off-site link is a footer item labelled "Shrine" pointing to shrinesolutions.com, which carries no commercial intent we could identify.

The store does publish terms, shipping and returns policies, and advertises free shipping with a 60-day guarantee, which is more disclosure than a bare shell store. The gap is not technical compromise but accountability: an anonymous, days-old operator with a free-mail contact and inflated-looking social proof.