Is joyfball.cn safe?
http://joyfball.cn/
Coveragestrong3 of 4 applicable core capabilities
Joyfball.cn is a high-risk online shop flagged for deceptive payment and data collection
An external security warning describes Joyfball.cn as a fraudulent e-commerce site that accepts payments and steals personal data through deceptive tactics. Two saved antivirus results also marked the URL as suspicious, although those results are stale. The evidence supports a High Risk rating rather than treating clean connection checks as proof of safety.
Loading saved screenshot
Preparing the saved page preview.
Where this site sits
- Dangerous1–20
- High Risk21–44
- Moderate Risk45–69
- Low Risk70–84
- Safe85–100
The score combines saved evidence strength and analysis quality. Coverage is reported separately.
01 · Investigation Brief
Investigation Brief
An external security warning describes Joyfball.cn as a fraudulent e-commerce site that accepts payments and steals personal data through deceptive tactics. Two saved antivirus results also marked the URL as suspicious, although those results are stale. The evidence supports a High Risk rating rather than treating clean connection checks as proof of safety.
The strongest evidence concerns the shop's commercial conduct
The external warning specifically identifies Joyfball.cn as a fraudulent e-commerce site that takes payments and steals personal information through deception.
The site presents customer-facing account and rewards features, including a login and a points offer stating that 20 points equal $1.
A separate court-record search result lists joyfball.cn among numerous related domains as a defendant, adding operator-level concern, though the supplied excerpt does not state the claims or outcome of that case.
Clean browser and encryption checks do not resolve the operator risk
The saved TLS test found a valid encrypted connection, and the Safe Browsing check returned no warning. These findings only show encryption and an absence of that particular warning; they do not rebut the adverse shop report.
Two saved antivirus observations marked the URL as suspicious, but their timing is stale and should be treated as corroborating context rather than current proof on its own.
The site's contact information was not reviewed, so this assessment cannot verify how customers could identify or contact the operator from the site's own pages.
Why the score is 24
One public warning on a scam-warning or security site: "Joyfball.cn є шахрайським сайтом електронної комерції, який приймає платежі та краде особисті дані через обманні тактики.". Coverage remains separate so missing sources cannot be mistaken for clean results.
02 · Security Evidence
Security evidence
Antivirus Engines
2/ 92
detectionsSaved analysis from October 2, 2026 - stale
2 engines flagged this URL
Every saved adverse engine is listed below. The full provider matrix remains available for audit.
- Malicious
- 0
- Suspicious
- 2
- Total
- 92
| Engine | Finding |
|---|---|
| GridinsoftSuspicious | suspicious |
| URLQuerySuspicious | suspicious |
All 92 engine results
- Gridinsoft - Suspicious
- URLQuery - Suspicious
- 0xSI_f33d - Unrated
- Abusix - Clean
- Acronis - Clean
- ADMINUSLabs - Clean
- AILabs (MONITORAPP) - Clean
- AlienVault - Clean
- alphaMountain.ai - Unrated
- AlphaSOC - Unrated
- Antiy-AVL - Clean
- ArcSight Threat Intelligence - Unrated
- AutoShun - Unrated
- Bfore.Ai PreCrime - Unrated
- BitDefender - Clean
- Bkav - Unrated
- BlockList - Clean
- Blueliv - Clean
- Certego - Clean
- ChainPatrol - Unrated
- Chong Lua Dao - Clean
- CINS Army - Clean
- CRDF - Clean
- Criminal IP - Clean
- CSIS Security Group - Unrated
- CTX AI - Clean
- Cyan - Unrated
- Cyble - Clean
- CyRadar - Clean
- desenmascara.me - Clean
- DNS8 - Unrated
- Dr.Web - Clean
- EmergingThreats - Clean
- Emsisoft - Clean
- Ermes - Unrated
- ESET - Clean
- ESTsecurity - Clean
- Forcepoint ThreatSeeker - Clean
- Fortinet - Clean
- Fortra - Unrated
- G-Data - Clean
- GCP Abuse Intelligence - Unrated
- Google Safe Browsing - Clean
- GreenSnow - Clean
- GreyNoise - Unrated
- Guardpot - Unrated
- Heimdal Security - Clean
- Hunt.io Intelligence - Unrated
- IPsum - Clean
- Juniper Networks - Clean
- K7AntiVirus - Unrated
- Kaspersky - Clean
- LevelBlue - Clean
- Lionic - Clean
- Lumu - Unrated
- Malwared - Clean
- MalwarePatrol - Clean
- MalwareURL - Unrated
- Mimecast - Unrated
- Netcraft - Unrated
- OpenPhish - Clean
- PhishFort - Unrated
- Phishing Database - Clean
- Phishtank - Clean
- PREBYTES - Clean
- PrecisionSec - Unrated
- Quick Heal - Clean
- Quttera - Clean
- Rising - Clean
- SafeToOpen - Unrated
- Sangfor - Clean
- Sansec eComscan - Unrated
- Scantitan - Clean
- SCUMWARE.org - Clean
- Seclookup - Clean
- Snort IP sample list - Unrated
- SOCRadar - Unrated
- Sophos - Clean
- StopForumSpam - Clean
- Sucuri SiteCheck - Clean
- Synthient - Unrated
- ThreatHive - Clean
- URLhaus - Clean
- Viettel Threat Intelligence - Clean
- VIPRE - Unrated
- ViriBack - Clean
- VX Vault - Clean
- Webroot - Clean
- Xcitium Verdict Cloud - Clean
- Yandex Safebrowsing - Clean
- ZeroCERT - Clean
- ZeroFox - Unrated
Security Scans
Checked against the browser threat feeds available to this scan — no hit.
What we observed
Loading saved screenshot
Preparing the saved page preview.
Visual context from the captured page
Save With Points ( 20 Points = $1.00 )
What the captured page showed
1 observation- 01
Save With Points ( 20 Points = $1.00 )
03 · Investigation Story
Investigation story
What the site claims
joyfball
What we observed
The page content was captured and checked alongside 61 antivirus results.
What independent research found
2 external findings were saved and compared with the page evidence.
What remains unverified
1 of the 4 applicable core capabilities did not complete, so those gaps remain visible in the coverage ledger.
What kind of site and risk is this?
Threat category
Fake Shop & Commercial Deception
Service and business model
Shop
Observed behavior
Evidence behind this classification
- 01One public warning on a scam-warning or security site: "Joyfball.cn є шахрайським сайтом електронної комерції, який приймає платежі та краде особисті дані через обманні тактики."
- 02A court-record search result lists joyfball.cn as a defendant alongside a network of similarly named domains.
- 032 antivirus results marked the URL as suspicious. This comes from a saved antivirus observation rather than a new submission, so treat the detection as real but confirm the timing.
If this is a scam — what it means for you
Using the shop can expose payment and personal information
According to the external warning, a visitor who transacts with Joyfball.cn may submit payment and personal information to a site described as using deceptive tactics to take payments and steal personal data.
If this is a scam, how it works
The evidence-backed path
Each stage below is preserved from the grounded analysis and linked to saved evidence.
The observed login and points program provide account-oriented paths that can encourage visitors to engage with the storefront.
Avoid logging in, creating an account, entering personal or payment information, or purchasing through Joyfball.cn. If you already paid or reused a password there, contact your payment provider, monitor the account, and change the reused password.
Web research findings
Independent findings for joyfball.cn, including public complaints, named review sources, registration records, and look-alike-domain evidence. A missing result is shown as unverified, never converted into a clean bill of health.
- Gridinsoftopen
"Joyfball.cn є шахрайським сайтом електронної комерції, який приймає платежі та краде особисті дані через обманні тактики."
- Justiaopen
"Defendant: | joyfball.group, enjoyfball.vip, enjoyfball.cloud, enjoyfball.cn, joyfball.cc, joyfball.cn, joyfball.com, lovefball.com, joyball.club, joyfball.club, joyfball.net, joyfball.shop, joyfootball.shop, enjoyfootball.shop, joyfball.uk, joyftball.com, joyfbal.com, joyfbal.com.cn and joyfooty.com"
Reputation Sources
How this domain rates across independent threat-intelligence and blocklist providers.
04 · Domain & Infrastructure
Domain & infrastructure
The plumbing behind the site — who registered it, how it’s encrypted, where it’s hosted, and where it links out. A valid certificate or a calm server doesn’t mean the business is honest — scam sites pass these checks too. Use this to corroborate the verdict, not to overturn it.
Infrastructure map
How the saved page connected to the wider web.
- Domainjoyfball.cn
- Redirects towww.joyfball.cn
- Hosted byCloudflare, Inc.
- Referencesimg.staticdj.com · static.staticdj.com
Contact Verification
Saved contact details can help identify the operator. Their presence supports traceability; it does not prove the business is trustworthy.
Domain & Encryption
Redirect Chain
- 1301http://joyfball.cn/
- 2301https://joyfball.cn/
- 3200https://www.joyfball.cn/
Server Reputation
Referenced Domains
Outbound domains this page links to or loads resources from. Each links to its own security scan.
05 · Evidence Ledger
Evidence ledger
- Antiviruspartial
- Browser threat feedcomplete
- Page contentcomplete
- Analysiscomplete
- Visual evidencecomplete
The conclusion is supported by the evidence saved with this report.
Technical threat
unknownMalware, phishing, credential theft and hostile infrastructure.
2 antivirus results marked the URL as suspicious. This comes from a saved antivirus observation rather than a new submission, so treat the detection as real but confirm the timing.
Operator / customer risk
suspiciousComplaints, withdrawals, business conduct and commercial traps.
One public warning on a scam-warning or security site: "Joyfball.cn є шахрайським сайтом електронної комерції, який приймає платежі та краде особисті дані через обманні тактики." · Log in
Source coverage and freshness
Status shows whether usable evidence was saved; finding shows what that evidence observed.
| Source | Result | Completion | Finding | Freshness |
|---|---|---|---|---|
| Antivirus | 2 of 92 engines flagged | Limited | Adverse | stale fallback · analysed Oct 2, 2026 |
| Browser protection | No browser threat-list match | Completed | No adverse finding | this scan · Oct 16, 2026 |
| Page content | Page fetched · HTTP 200 | Completed | No adverse finding | this scan · Oct 16, 2026 |
| Visual evidence | 1 visible observation saved with the page capture | Completed | No adverse finding | this scan · Oct 16, 2026 |
| Independent research | 2 independent findings were saved | Completed | Adverse | this scan · Oct 16, 2026 |
- Antivirus
- Result2 of 92 engines flagged
- CompletionLimited
- FindingAdverse
- Freshnessstale fallback · analysed Oct 2, 2026
- Browser protection
- ResultNo browser threat-list match
- CompletionCompleted
- FindingNo adverse finding
- Freshnessthis scan · Oct 16, 2026
- Page content
- ResultPage fetched · HTTP 200
- CompletionCompleted
- FindingNo adverse finding
- Freshnessthis scan · Oct 16, 2026
- Visual evidence
- Result1 visible observation saved with the page capture
- CompletionCompleted
- FindingNo adverse finding
- Freshnessthis scan · Oct 16, 2026
- Independent research
- Result2 independent findings were saved
- CompletionCompleted
- FindingAdverse
- Freshnessthis scan · Oct 16, 2026
07 · Safety FAQ
Safety FAQ
Common questions, answered directly from the scan data above — so the answers reflect the saved verdict and evidence in this report.
Is joyfball.cn a scam or a legit online store?
Is joyfball.cn safe to use?
What should I do if I already gave my details to joyfball.cn?
Can I get my money back from joyfball.cn?
I ordered from joyfball.cn but nothing arrived — is it a fake shop?
How do I report joyfball.cn?
Why does joyfball.cn look legitimate if it's a scam?
Has joyfball.cn been flagged by antivirus engines?
Is joyfball.cn on any phishing or malware blacklists?
Does joyfball.cn have a valid SSL certificate?
Where is joyfball.cn hosted?
How often is the joyfball.cn report updated?
08 · Final Verdict
Final verdict
Joyfball.cn is a high-risk online shop flagged for deceptive payment and data collection
An external security warning describes Joyfball.cn as a fraudulent e-commerce site that accepts payments and steals personal data through deceptive tactics. Two saved antivirus results also marked the URL as suspicious, although those results are stale. The evidence supports a High Risk rating rather than treating clean connection checks as proof of safety.
09 · Community
