Is nuttoy.com safe?
http://nuttoy.com/
Coveragecomplete4 of 4 applicable core capabilities
Nut Toy runs a template-built storefront with conflicting operator identities and free-mail contacts
Nut Toy (nuttoy.com) presents itself as a Shopify toy store, but its own About-us copy is a template used across a known network of fake shops, and its contact address is a free-mail inbox rather than a mailbox on its own domain. These two tells appear together on a 579-day-old domain, which is the exact combination flagged as a shell-store pattern. Technical checks are clean — no malware or phishing detections and a valid encrypted connection — but those only mean nothing malicious was served at scan time, not that the shop is trustworthy. The operator identity is also inconsistent, with different company names and multiple disparate contact emails reported across the site's pages. Because the storefront is built from known fake-shop kit material and hides behind free-mail contact, the score sits in the High Risk band.
Be the first to review nuttoy.com
Lost money to nuttoy.com? Warn others
Loading saved screenshot
Preparing the saved page preview.
Where this site sits
- Dangerous1–20
- High Risk21–44
- Moderate Risk45–69
- Low Risk70–84
- Safe85–100
The score combines saved evidence strength and analysis quality. Coverage is reported separately.
01 · Investigation Brief
Investigation Brief
Nut Toy (nuttoy.com) presents itself as a Shopify toy store, but its own About-us copy is a template used across a known network of fake shops, and its contact address is a free-mail inbox rather than a mailbox on its own domain. These two tells appear together on a 579-day-old domain, which is the exact combination flagged as a shell-store pattern. Technical checks are clean — no malware or phishing detections and a valid encrypted connection — but those only mean nothing malicious was served at scan time, not that the shop is trustworthy. The operator identity is also inconsistent, with different company names and multiple disparate contact emails reported across the site's pages. Because the storefront is built from known fake-shop kit material and hides behind free-mail contact, the score sits in the High Risk band.
The storefront is built from a known fake-shop template
The site's own About-us copy matches a template used across a known network of fake shops, with fragments such as 'A.core', 'A.looking-for', 'A.best-deal', 'A.lifetime', 'A.suppliers' and 'A.core-vision' appearing on the About page. This is not a generic design choice — it is a specific kit reused by multiple storefronts in the same operation.
That template tell appears together with a free-mail contact address (6598508361@163.com) rather than a mailbox on nuttoy.com, on a domain that is 579 days old. The combination of a generic or free-mail contact and fake-shop template copy on a sub-two-year domain is the shell-store pattern.
Conflicting operator details and no visible postal address
The captured page shows no operator postal address, so a buyer cannot verify where the business is registered or where to send a return. The contact channel that is visible routes to a free-mail inbox rather than a domain mailbox.
The storefront itself is a standard Shopify build — the page shows a cart, a 'Shop all' link and a 'Powered by Shopify' footer — which is a neutral platform fact and not a trust signal on its own.
Clean technical checks do not offset the operator risk
The saved security checks returned no threat warning from the browser threat feed, zero malicious or suspicious detections across 93 engines, and a valid encrypted connection. Those results mean no active malware or phishing was detected at scan time; they say nothing about whether orders placed on the site will be fulfilled.
The domain age of 579 days is longer than many transient scam shops and is the main counterweight in this assessment, but it does not neutralise the fake-shop template and free-mail contact combination observed on the same domain.
Why the score is 38
The site's own About-us copy is a template used across a known network of fake shops, on a 579-day-old domain. Coverage remains separate so missing sources cannot be mistaken for clean results.
02 · Security Evidence
Security evidence
Antivirus Engines
0/ 93
No detectionsFresh result
No detections across 58 engines that rated this URL
No antivirus engine that answered raised an adverse result; 35 had no rating for this URL. This is one signal, not a guarantee.
- Malicious
- 0
- Suspicious
- 0
- Total
- 93
All 93 engine results
- 0xSI_f33d - Unrated
- Abusix - Clean
- Acronis - Clean
- ADMINUSLabs - Clean
- AILabs (MONITORAPP) - Clean
- AlienVault - Clean
- alphaMountain.ai - Unrated
- AlphaSOC - Unrated
- Antiy-AVL - Clean
- ArcSight Threat Intelligence - Unrated
- AutoShun - Unrated
- Bfore.Ai PreCrime - Unrated
- BitDefender - Clean
- Bkav - Unrated
- BlockList - Clean
- Blueliv - Clean
- Certego - Clean
- ChainPatrol - Unrated
- Chong Lua Dao - Clean
- CINS Army - Clean
- CRDF - Clean
- Criminal IP - Clean
- CSIS Security Group - Unrated
- CTX AI - Clean
- Cyan - Unrated
- Cyble - Clean
- CyRadar - Clean
- desenmascara.me - Clean
- DNS8 - Unrated
- Dr.Web - Clean
- EmergingThreats - Clean
- Emsisoft - Clean
- Ermes - Unrated
- ESET - Clean
- ESTsecurity - Clean
- Forcepoint ThreatSeeker - Unrated
- Fortinet - Clean
- Fortra - Unrated
- G-Data - Clean
- GCP Abuse Intelligence - Unrated
- Google Safe Browsing - Clean
- GreenSnow - Clean
- GreyNoise - Unrated
- Gridinsoft - Unrated
- Guardpot - Unrated
- Heimdal Security - Clean
- Hunt.io Intelligence - Unrated
- IPsum - Clean
- Juniper Networks - Clean
- K7AntiVirus - Unrated
- Kaspersky - Clean
- LevelBlue - Clean
- Lionic - Clean
- Lumu - Unrated
- Malwared - Clean
- MalwarePatrol - Clean
- MalwareURL - Unrated
- Mimecast - Unrated
- Netcraft - Unrated
- OpenPhish - Clean
- Orcapot - Unrated
- PhishFort - Unrated
- Phishing Database - Clean
- Phishtank - Clean
- PREBYTES - Clean
- PrecisionSec - Unrated
- Quick Heal - Clean
- Quttera - Clean
- Rising - Clean
- SafeToOpen - Unrated
- Sangfor - Clean
- Sansec eComscan - Unrated
- Scantitan - Clean
- SCUMWARE.org - Clean
- Seclookup - Clean
- Snort IP sample list - Unrated
- SOCRadar - Unrated
- Sophos - Clean
- StopForumSpam - Clean
- Sucuri SiteCheck - Clean
- Synthient - Unrated
- ThreatHive - Clean
- URLhaus - Clean
- URLQuery - Unrated
- Viettel Threat Intelligence - Clean
- VIPRE - Unrated
- ViriBack - Clean
- VX Vault - Clean
- Webroot - Clean
- Xcitium Verdict Cloud - Clean
- Yandex Safebrowsing - Clean
- ZeroCERT - Clean
- ZeroFox - Unrated
Security Scans
Checked against the browser threat feeds available to this scan — no hit.
What we observed
Loading saved screenshot
Preparing the saved page preview.
Visual context from the captured page
NUT TOY
What the captured page showed
1 observation- 01
NUT TOY
03 · Investigation Story
Investigation story
What the site claims
Nut Toy
What we observed
The page content was captured and checked alongside 58 antivirus results.
What independent research found
The search completed without a material external warning or corroborating report.
What remains unverified
The checks completed, but ownership, business claims, and future site behavior can still change after this snapshot.
What kind of site and risk is this?
Threat category
Fake Shop & Commercial Deception
Service and business model
Shop
Observed behavior
Evidence behind this classification
- 01Several fake-shop tells appear together on a 579-day-old domain: a generic or free-mail contact, fake-shop template copy.
- 02The site's own About-us copy is a template used across a known network of fake shops, on a 579-day-old domain.
- 03The store's contact address is a free-mail inbox (163.com) rather than a mailbox on its own domain.
Web research findings
Independent findings for nuttoy.com, including public complaints, named review sources, registration records, and look-alike-domain evidence. A missing result is shown as unverified, never converted into a clean bill of health.
No independently sourced scam reports or credibility records were found for nuttoy.com. That is common for new or low-traffic sites and does not clear the site.
Reputation Sources
How this domain rates across independent threat-intelligence and blocklist providers.
04 · Domain & Infrastructure
Domain & infrastructure
The plumbing behind the site — who registered it, how it’s encrypted, where it’s hosted, and where it links out. A valid certificate or a calm server doesn’t mean the business is honest — scam sites pass these checks too. Use this to corroborate the verdict, not to overturn it.
Infrastructure map
How the saved page connected to the wider web.
- Domainnuttoy.com
- Redirects tonuttoy.com
- Hosted byShopify, Inc.
- Referencesfonts.shopifycdn.com · cdn.shopify.com
Domain Timeline
- Mar 24, 2025Domain registered
First appeared in WHOIS records — 1.5 years old when this review was saved.
- Oct 25, 2026Saved security review — Rated High Risk
The completed checks from this saved scan are detailed above.
Contact Verification
Saved contact details can help identify the operator. Their presence supports traceability; it does not prove the business is trustworthy.
- No operator postal address visible on the captured page.
- Contact email on the site's own domain (info@nuttoy.com).
- Phone number listed (+8615818792913).
Domain & Encryption
Redirect Chain
- 1301http://nuttoy.com/
- 2200https://nuttoy.com/
Server Reputation
Referenced Domains
Outbound domains this page links to or loads resources from. Each links to its own security scan.
05 · Evidence Ledger
Evidence ledger
- Antiviruscomplete
- Browser threat feedcomplete
- Page contentcomplete
- Analysiscomplete
- Visual evidencecomplete
The conclusion is supported by the evidence saved with this report.
Technical threat
unknownMalware, phishing, credential theft and hostile infrastructure.
No confirmed evidence in this dimension.
Operator / customer risk
suspiciousComplaints, withdrawals, business conduct and commercial traps.
The site's own About-us copy is a template used across a known network of fake shops, on a 579-day-old domain. · Several fake-shop tells appear together on a 579-day-old domain: a generic or free-mail contact, fake-shop template copy.
Source coverage and freshness
Status shows whether usable evidence was saved; finding shows what that evidence observed.
| Source | Result | Completion | Finding | Freshness |
|---|---|---|---|---|
| Antivirus | 0 of 93 engines flagged | Completed | No adverse finding | fresh · analysed Oct 25, 2026 |
| Browser protection | No browser threat-list match | Completed | No adverse finding | this scan · Oct 25, 2026 |
| Page content | Page fetched · HTTP 200 | Completed | No adverse finding | this scan · Oct 25, 2026 |
| Visual evidence | 1 visible observation saved with the page capture | Completed | No adverse finding | this scan · Oct 25, 2026 |
| Independent research | The search completed without a material external finding | Completed | No adverse finding | this scan · Oct 25, 2026 |
- Antivirus
- Result0 of 93 engines flagged
- CompletionCompleted
- FindingNo adverse finding
- Freshnessfresh · analysed Oct 25, 2026
- Browser protection
- ResultNo browser threat-list match
- CompletionCompleted
- FindingNo adverse finding
- Freshnessthis scan · Oct 25, 2026
- Page content
- ResultPage fetched · HTTP 200
- CompletionCompleted
- FindingNo adverse finding
- Freshnessthis scan · Oct 25, 2026
- Visual evidence
- Result1 visible observation saved with the page capture
- CompletionCompleted
- FindingNo adverse finding
- Freshnessthis scan · Oct 25, 2026
- Independent research
- ResultThe search completed without a material external finding
- CompletionCompleted
- FindingNo adverse finding
- Freshnessthis scan · Oct 25, 2026
07 · Safety FAQ
Safety FAQ
Common questions, answered directly from the scan data above — so the answers reflect the saved verdict and evidence in this report.
Is nuttoy.com a scam or a legit online store?
Is nuttoy.com safe to use?
What should I do if I already gave my details to nuttoy.com?
Can I get my money back from nuttoy.com?
I ordered from nuttoy.com but nothing arrived — is it a fake shop?
How do I report nuttoy.com?
Why does nuttoy.com look legitimate if it's a scam?
Has nuttoy.com been flagged by antivirus engines?
Is nuttoy.com on any phishing or malware blacklists?
How old is the nuttoy.com domain?
Does nuttoy.com have a valid SSL certificate?
How often is the nuttoy.com report updated?
08 · Final Verdict
Final verdict
Nut Toy runs a template-built storefront with conflicting operator identities and free-mail contacts
Nut Toy (nuttoy.com) presents itself as a Shopify toy store, but its own About-us copy is a template used across a known network of fake shops, and its contact address is a free-mail inbox rather than a mailbox on its own domain. These two tells appear together on a 579-day-old domain, which is the exact combination flagged as a shell-store pattern. Technical checks are clean — no malware or phishing detections and a valid encrypted connection — but those only mean nothing malicious was served at scan time, not that the shop is trustworthy. The operator identity is also inconsistent, with different company names and multiple disparate contact emails reported across the site's pages. Because the storefront is built from known fake-shop kit material and hides behind free-mail contact, the score sits in the High Risk band.
09 · Community
