Is merrysky.shop safe?
http://merrysky.shop/
Checked on
How we checked
Coverage: strong · 5 of 6 applicable core capabilities
- Antivirus (57 of 93 engines answered) · saved result: did not fully complete
- Google Safe Browsing: completed
- page reading: completed
- page capture: completed
- domain records: completed
- web research: completed
Anonymous 46-day-old single-product Christmas projector store with no disclosed operator and a return policy that excludes any opened item
merrysky.shop is a Shopify storefront selling one product — a "Merry Sky" Christmas ceiling light projector — with a permanent "40% OFF ENTIRE STORE! SALE ENDS MIDNIGHT!" banner and a single "Buy Here!" path to its own product page. Nothing malicious was detected: no threat warning, a valid encrypted connection, and a clean hosting reputation. The concern is commercial: the domain is 46 days old, no company name, registration number, postal address or phone number appears on the captured pages, the only contact mailbox sits on a free anonymous provider, and the FAQ still shows an untranslated placeholder where the shop's email should be. The refund policy only accepts items that have never been switched on, plugged in or tested, which sits awkwardly beside the homepage promise of a full 30 days to try it. That combination puts the site in the moderate-risk band rather than the safe one.
Loading saved screenshot
Preparing the saved page preview.
Where this site sits
- Dangerous1–20
- High Risk21–44
- Moderate Risk45–69
- Low Risk70–84
- Safe85–100
The score combines saved evidence strength and analysis quality. Coverage is reported separately.
Why 52/100
Moderate Risk covers scores 45–69. 5 findings pulled the score down; 1 pushed it up.
What pulled the score down
- ModerateThe return policy only accepts brand-new, unopened, never-tested items and refuses or charges return shipping for anything opened or used, despite a homepage promise of 30 days to try it.-10 pts
- ModerateReturns are handled through a free anonymous-provider mailbox, and the homepage FAQ still shows the untranslated placeholder "[adres e-mail sklepu]" instead of an address.-10 pts
- ModerateOne public warning in public web research: "25% Score de confiance Faible Vigilance requise"-9 pts
- MinorThe domain is 46 days old, consistent with a short-lived seasonal pop-up store with no track record.
- MinorNo company name, registration number, postal address or phone number appears on the captured pages, and no contact email uses the site's own domain.
What pushed the score up
- SupportsNo threat warning from Safe Browsing, a valid encrypted connection, and a hosting IP with an abuse confidence score of 0/100 across seven saved reports.
Points come from the saved evidence ledger: it lowered the score from 81 to 52 and split those 29 points between the findings that show points; the others carry no points in the ledger. Community reviews never change the Safety Score.
01 · Investigation Brief
Investigation Brief
merrysky.shop is a Shopify storefront selling one product — a "Merry Sky" Christmas ceiling light projector — with a permanent "40% OFF ENTIRE STORE! SALE ENDS MIDNIGHT!" banner and a single "Buy Here!" path to its own product page. Nothing malicious was detected: no threat warning, a valid encrypted connection, and a clean hosting reputation. The concern is commercial: the domain is 46 days old, no company name, registration number, postal address or phone number appears on the captured pages, the only contact mailbox sits on a free anonymous provider, and the FAQ still shows an untranslated placeholder where the shop's email should be. The refund policy only accepts items that have never been switched on, plugged in or tested, which sits awkwardly beside the homepage promise of a full 30 days to try it. That combination puts the site in the moderate-risk band rather than the safe one.
Who runs this shop is not disclosed anywhere
The captured pages carry no operator identity: no contact email on the site's own domain, no phone number and no postal address. For a shop that asks for payment and a delivery address, that leaves a buyer with no named business to hold responsible.
The only mailbox given is merryskycontact@atomicmail.io, a free anonymous-provider address used for return requests, and the homepage FAQ still contains the untranslated placeholder "[adres e-mail sklepu]" instead of an address. That is the signature of a hastily assembled template store rather than an established retailer.
The domain is 46 days old, and an independent reputation lookup records the same recent creation date and notes that no technical data could be retrieved about the owner. A short-lived seasonal pop-up is plausible, but it also means there is no track record to fall back on.
The buying path is ordinary; the return terms are not
All commerce stays on merrysky.shop: the header "Buy Here!" button and the cart icon both lead to the shop's own product and cart pages, with no cross-domain checkout or affiliate redirect observed. The site-wide banner repeats "40% OFF ENTIRE STORE!" with "SALE ENDS MIDNIGHT!" and free worldwide shipping, an evergreen urgency message rather than a dated promotion.
The homepage promises "You have a full 30 days to try it", but the published return conditions only accept an item that is brand new and unused, never switched on, plugged in, installed or tested, and still in its original sealed packaging. Opened, used or installed items are explicitly ineligible, and non-compliant returns are refused or sent back at the buyer's cost. For a product whose whole pitch is projecting stars over a child's bed, that gap matters.
Testimonials on the page are attributed only to first-name initials such as "Jessica M." with no review platform, source or verification shown, so they cannot be treated as independent confirmation that the shop delivers.
No technical threat found — the risk is commercial
Our checks found no malware or phishing signal: the browser threat feed returned no threat warning, the saved TLS check found a valid encrypted connection, and the hosting IP carries an abuse confidence score of 0/100 across seven saved reports. Nothing on the captured pages pushed downloads, pop-ups or notification prompts.
Independent research did surface one adverse third-party signal: a reputation service rates the domain's trust as low and advises caution. That is a general trust rating rather than a documented case of a customer losing money, and we found no specific complaint about non-delivery or billing for this domain, so it supports caution rather than proving a scam.
Weighing both sides: clean technical checks do not make an anonymous, weeks-old store with a narrow return window safe to buy from, but the absence of any fake-shop kit markers, cross-domain checkout or malware means the evidence does not justify the high-risk band either. Moderate risk fits what was actually observed.
Why the score is 52
The return policy only accepts brand-new, unopened, never-tested items and refuses or charges return shipping for anything opened or used, despite a homepage promise of 30 days to try it. Coverage remains separate so missing sources cannot be mistaken for clean results.
02 · Security Evidence
Security evidence
Antivirus Engines
0/ 93
No detectionsSaved analysis from October 16, 2026 - stale
No detections across 57 engines that rated this URL
No antivirus engine that answered raised an adverse result; 36 had no rating for this URL. This is one signal, not a guarantee.
- Malicious
- 0
- Suspicious
- 0
- Total
- 93
All 93 engine results
- 0xSI_f33d - Unrated
- Abusix - Clean
- Acronis - Clean
- ADMINUSLabs - Clean
- AILabs (MONITORAPP) - Clean
- AlienVault - Clean
- alphaMountain.ai - Unrated
- AlphaSOC - Unrated
- Antiy-AVL - Clean
- ArcSight Threat Intelligence - Unrated
- AutoShun - Unrated
- Bfore.Ai PreCrime - Unrated
- BitDefender - Clean
- Bkav - Unrated
- BlockList - Clean
- Blueliv - Clean
- Certego - Clean
- ChainPatrol - Unrated
- Chong Lua Dao - Clean
- CINS Army - Clean
- CRDF - Clean
- Criminal IP - Unrated
- CSIS Security Group - Unrated
- CTX AI - Clean
- Cyan - Unrated
- Cyble - Clean
- CyRadar - Clean
- desenmascara.me - Clean
- DNS8 - Unrated
- Dr.Web - Clean
- EmergingThreats - Clean
- Emsisoft - Clean
- Ermes - Unrated
- ESET - Clean
- ESTsecurity - Clean
- Forcepoint ThreatSeeker - Clean
- Fortinet - Clean
- Fortra - Unrated
- G-Data - Clean
- GCP Abuse Intelligence - Unrated
- Google Safe Browsing - Clean
- GreenSnow - Clean
- GreyNoise - Unrated
- Gridinsoft - Unrated
- Guardpot - Unrated
- Heimdal Security - Clean
- Hunt.io Intelligence - Unrated
- IPsum - Clean
- Juniper Networks - Clean
- K7AntiVirus - Unrated
- Kaspersky - Clean
- LevelBlue - Unrated
- Lionic - Clean
- Lumu - Unrated
- Malwared - Clean
- MalwarePatrol - Clean
- MalwareURL - Unrated
- Mimecast - Unrated
- Netcraft - Unrated
- OpenPhish - Clean
- Orcapot - Unrated
- PhishFort - Unrated
- Phishing Database - Clean
- Phishtank - Clean
- PREBYTES - Clean
- PrecisionSec - Unrated
- Quick Heal - Clean
- Quttera - Clean
- Rising - Clean
- SafeToOpen - Unrated
- Sangfor - Clean
- Sansec eComscan - Unrated
- Scantitan - Clean
- SCUMWARE.org - Clean
- Seclookup - Clean
- Snort IP sample list - Unrated
- SOCRadar - Unrated
- Sophos - Clean
- StopForumSpam - Clean
- Sucuri SiteCheck - Clean
- Synthient - Unrated
- ThreatHive - Clean
- URLhaus - Clean
- URLQuery - Unrated
- Viettel Threat Intelligence - Clean
- VIPRE - Unrated
- ViriBack - Clean
- VX Vault - Clean
- Webroot - Clean
- Xcitium Verdict Cloud - Clean
- Yandex Safebrowsing - Clean
- ZeroCERT - Clean
- ZeroFox - Unrated
How security vendors categorise this site
- Forcepoint ThreatSeekernewly registered websites
- Googleshopping
Each vendor’s own label for the site, saved with the antivirus result. Labels are separate from the engine verdicts above and can disagree with each other.
Security Scans
Checked against the browser threat feeds available to this scan — no hit.
What we observed
Loading saved screenshot
Preparing the saved page preview.
Visual context from the captured page
Header shows a gold 'Merry Sky' wordmark with a small reindeer/sleigh graphic and the tagline 'Christmas has no bedtime'; navigation is Home (highlighted red), Buy Here!, Contact, plus a cart icon. Black marquee bar repeats '40% OFF ENTIRE STORE!', 'SALE ENDS MIDNIGHT!' and 'FREE WORLDWIDE SHIPPING' across the top of the page. Hero image shows a child in bed under a ceiling projection of stars, a crescent moon and a reindeer sleigh, with a glowing dome projector on the nightstand; headline 'Some bedtimes deserve better than a night light' and a red 'See how it works!' button. Lower section shows a second rendered projection scene with a large moon and Christmas tree, captioned 'A Christmas sky for kids' — imagery appears to be stylised/AI-style renders rather than photographs of a real product.
What the captured page showed
4 observations- 01
Header shows a gold 'Merry Sky' wordmark with a small reindeer/sleigh graphic and the tagline 'Christmas has no bedtime'; navigation is Home (highlighted red), Buy Here!, Contact, plus a cart icon.
- 02
Black marquee bar repeats '40% OFF ENTIRE STORE!', 'SALE ENDS MIDNIGHT!' and 'FREE WORLDWIDE SHIPPING' across the top of the page.
- 03
Hero image shows a child in bed under a ceiling projection of stars, a crescent moon and a reindeer sleigh, with a glowing dome projector on the nightstand; headline 'Some bedtimes deserve better than a night light' and a red 'See how it works!' button.
- 04
Lower section shows a second rendered projection scene with a large moon and Christmas tree, captioned 'A Christmas sky for kids' — imagery appears to be stylised/AI-style renders rather than photographs of a real product.
What the page says about itself
What the site says about itself, quoted from the pages we read. The site wrote these words; they are not our findings.
- Page title
MerrySky
Pages we read
- Main page/Read
- Privacy policy/pages/data-sharing-opt-outRead
- Refund / returns policy/policies/refund-policyRead
- Shipping policy/policies/shipping-policyRead
- Contact page/pages/contactRead
03 · Investigation Story
Investigation story
What the site claims
MerrySky
What we observed
The page content was captured and checked alongside 57 antivirus results.
What independent research found
3 external findings were saved and compared with the page evidence.
What remains unverified
1 of the 6 applicable core capabilities did not complete, so those gaps remain visible in the coverage ledger.
What kind of site and risk is this?
Threat category
Fake Shop & Commercial Deception
Service and business model
Dropshipping
Observed behavior
Evidence behind this classification
- 01No company name, registration number, postal address or phone number appears on the captured pages, and no contact email uses the site's own domain.
- 02The return policy only accepts brand-new, unopened, never-tested items and refuses or charges return shipping for anything opened or used, despite a homepage promise of 30 days to try it.
- 03Returns are handled through a free anonymous-provider mailbox, and the homepage FAQ still shows the untranslated placeholder "[adres e-mail sklepu]" instead of an address.
Web research findings
Independent findings for merrysky.shop, including public complaints, named review sources, registration records, and look-alike-domain evidence. A missing result is shown as unverified, never converted into a clean bill of health.
- ScamDocopen
"25% Score de confiance Faible Vigilance requise"
Reputation Sources
How this domain rates across independent threat-intelligence and blocklist providers.
04 · Domain & Infrastructure
Domain & infrastructure
The plumbing behind the site — who registered it, how it’s encrypted, where it’s hosted, and where it links out. A valid certificate or a calm server doesn’t mean the business is honest — scam sites pass these checks too. Use this to corroborate the verdict, not to overturn it.
Infrastructure map
How the saved page connected to the wider web.
- Domainmerrysky.shop
- Redirects tomerrysky.shop
- Hosted byShopify, Inc.
- Referencescdn.shopify.com · gstatic.com
Domain Timeline
- Sep 18, 2026Domain registered
First appeared in WHOIS records — 46 days old when this review was saved.
- Nov 3, 2026Saved security review — Rated Moderate Risk
The evidence in this saved scan is mixed or incomplete; the completed checks are detailed above.
merrysky.shop was registered very recently when this review was saved. Freshly-registered domains are disproportionately used for scams, so a young domain whose evidence is mixed or incomplete warrants extra caution.
Contact Verification
Saved contact details can help identify the operator. Their presence supports traceability; it does not prove the business is trustworthy.
- No contact email uses the site's own domain.
- No phone number listed on the captured page.
- No operator postal address visible on the captured page.
Domain & Encryption
Certificate issued for merrysky.shop.
A shared content-delivery network address answers for many sites, so it is not the site's own server and says nothing about who runs it.
Scripts, fonts and CDNs
- Google Fonts
Payment providers the page loads
- Shop Pay
Read from the first 20 outside domains the page loads and the shop platform it uses; the web server and platform rows are under Hosting & Technology. A payment script on the page does not prove the shop accepts that method at checkout, or that you are protected.
Redirect Chain
- 1301http://merrysky.shop/
- 2200https://merrysky.shop/
Server Reputation
Referenced Domains
Outbound domains this page links to or loads resources from. Each links to its own security scan.
05 · Evidence Ledger
Evidence ledger
- Antiviruspartial
- Browser threat feedcomplete
- Page contentcomplete
- Analysiscomplete
- Visual evidencecomplete
The conclusion is supported by the evidence saved with this report.
Technical threat
unknownMalware, phishing, credential theft and hostile infrastructure.
No confirmed evidence in this dimension.
Operator / customer risk
suspiciousComplaints, withdrawals, business conduct and commercial traps.
The return policy only accepts brand-new, unopened, never-tested items and refuses or charges return shipping for anything opened or used, despite a homepage promise of 30 days to try it. · Returns are handled through a free anonymous-provider mailbox, and the homepage FAQ still shows the untranslated placeholder "[adres e-mail sklepu]" instead of an address.
Source coverage and freshness
Status shows whether usable evidence was saved; finding shows what that evidence observed.
| Source | Result | Completion | Finding | Freshness |
|---|---|---|---|---|
| Antivirus | 0 of 93 engines flagged | Limited | No saved finding | stale fallback · analysed Oct 16, 2026 |
| Browser protection | No browser threat-list match | Completed | No adverse finding | this scan · Nov 3, 2026 |
| Page content | Page fetched · HTTP 200 | Completed | No adverse finding | this scan · Nov 3, 2026 |
| Visual evidence | 4 visible observations saved with the page capture | Completed | No adverse finding | this scan · Nov 3, 2026 |
| Independent research | 3 independent findings were saved | Completed | Adverse | this scan · Nov 3, 2026 |
- Antivirus
- Result0 of 93 engines flagged
- CompletionLimitedFindingNo saved finding
- Freshnessstale fallback · analysed Oct 16, 2026
- Browser protection
- ResultNo browser threat-list match
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Nov 3, 2026
- Page content
- ResultPage fetched · HTTP 200
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Nov 3, 2026
- Visual evidence
- Result4 visible observations saved with the page capture
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Nov 3, 2026
- Independent research
- Result3 independent findings were saved
- CompletionCompletedFindingAdverse
- Freshnessthis scan · Nov 3, 2026
07 · Safety FAQ
Safety FAQ
Common questions, answered directly from the scan data above — so the answers reflect the saved verdict and evidence in this report.
Is merrysky.shop a scam or is it safe?
Is merrysky.shop safe to use?
Has merrysky.shop been flagged by antivirus engines?
Is merrysky.shop on any phishing or malware blacklists?
How old is the merrysky.shop domain?
Does merrysky.shop have a valid SSL certificate?
Where is merrysky.shop hosted?
How often is the merrysky.shop report updated?
08 · Final Verdict
Final verdict
Anonymous 46-day-old single-product Christmas projector store with no disclosed operator and a return policy that excludes any opened item
merrysky.shop is a Shopify storefront selling one product — a "Merry Sky" Christmas ceiling light projector — with a permanent "40% OFF ENTIRE STORE! SALE ENDS MIDNIGHT!" banner and a single "Buy Here!" path to its own product page. Nothing malicious was detected: no threat warning, a valid encrypted connection, and a clean hosting reputation. The concern is commercial: the domain is 46 days old, no company name, registration number, postal address or phone number appears on the captured pages, the only contact mailbox sits on a free anonymous provider, and the FAQ still shows an untranslated placeholder where the shop's email should be. The refund policy only accepts items that have never been switched on, plugged in or tested, which sits awkwardly beside the homepage promise of a full 30 days to try it. That combination puts the site in the moderate-risk band rather than the safe one.
09 · Community
Community
Are you the owner of merrysky.shop?Verify and reply