Is notforresale.it safe?

A Shopify storefront selling discounted apparel

The captured page text and visual notes describe a clothing brand shop: 'BUY ONE GET ONE -50% NOT FOR RESALE notforresale.it'. The promotion is applied automatically at checkout — adding two or more items gives the lower-value item a 50% discount, cannot be combined with other discount codes, applies catalogue-wide unless stated otherwise, and can be suspended at any time.

Payment is handled through a standard Shopify checkout, described on the page as 'Pagamenti sicuri Checkout sicuro Shopify'. This is a normal hosted-commerce flow, not a custom card-harvesting page, and no credential or payment-redirect anomaly was recorded.

US entity behind an Italian-facing brand, no phone or local address on the page

The site's own page identifies the operator as 'Not For Resale LLC', 8 The Green, STE R, Dover, DE 19901, USA, with EIN 61-2235642 and a contact address at order-assistance@notforresale.it. That is a disclosed US company registration, not an anonymous ownership structure.

At the same time, the captured page lists no phone number and no operator postal address in Italy, which is notable for a brand marketed in Italian. This is a transparency gap on the pages that were read, not proof of fraudulent intent; a printed LLC and tax ID are also things scam operations commonly produce, so they are not by themselves reassuring.

The domain itself is not new — registry data puts it at roughly five years old — and the site offers a link to the EU online dispute resolution platform, ec.europa.eu/consumers/odr, which is a consumer-complaint route rather than a commercial funnel.

Refund terms are the main customer risk; technical layer is clean

The store's refund handling is the clearest customer-facing concern: returns are settled as store credit (vouchers) and a €14,90 management fee is deducted from the refund. That is a legitimate commercial policy to state, but it means a buyer who changes their mind does not get money back and loses a fixed amount — an outcome a shopper should weigh before ordering.

On the technical side, the browser threat feed returned no threat warning and the saved TLS check found a valid encrypted connection. Two antivirus engines (Gridinsoft, URLQuery) previously marked the URL as suspicious in a saved, older observation; that detection should be treated as real but dated, and it is not corroborated by any current blocklist or by the site's page content.

No pop-ups, forced redirects, notification prompts, deceptive download controls or file downloads were recorded for this domain, and the only cross-site link observed is the consumer-dispute portal at the European Commission, which carries no commercial intent.