Is ouushoesa.shop safe?

An official-distributor claim the site's own paperwork contradicts

The About page states that "OnSwiss LLC is the official U.S.‐based B2C distributor for On, the renowned Swiss performance‐running shoe brand" and that stock comes "directly from our warehouse". The Terms page, however, defines the Company simply as "ouushoesa.shop" — no legal entity, no registration number, no operator disclosure. A store that really were a brand's official distributor would normally name the entity behind it in its own legal text.

The visual presentation reinforces the claim: the header carries the On logo mark, the hero shows runners in On-branded footwear, and products are listed under On model names such as "Women's Cloudmonster 3 Hyper – Lily | Limelight" with a struck-through $130.00 against $69.99. No disclaimer marks the shop as an independent reseller.

Independent research found a Better Business Bureau Scam Tracker entry naming "OnSwiss LLC" and a Denver, CO 80209 location, and a separate complaint describing counterfeit On Cloud Monster shoes sold through an online storefront advertising two pairs for $99. A Gridinsoft listing also flags a similarly named shop as a suspicious website.

Contact details and policy pages that don't line up

The site does publish a phone number (+1 311-673-1291) and a postal address, and a support mailbox on its own domain, so there is some contact surface. But the contact email observed on the site sits on kairor.shop, a different domain from the store, which is unusual for a single-brand merchant and suggests more than one storefront behind the same operation.

The Terms page's "Returns Policy" link leads off-site to animefansite.com, an unrelated site, rather than to the store's own returns page. That is the signature of recycled template text rather than a merchant writing its own policies. The published refund terms — inspection of the return, then a refund to the original payment method within 10 business days — are stated terms only; nothing observed shows how refunds are actually handled.

Clean browser checks, but antivirus engines disagree

The browser threat feed returned no threat warning and the saved TLS check found a valid encrypted connection, so there is no browser-level block or certificate problem. The hosting IP carries an abuse confidence score of 0/100 in the one saved report.

Against that, a saved antivirus observation records four independent engine families returning an adverse result, including phishing and malicious classifications. That data is stale rather than a fresh submission, so it is a real signal but not proof of malware or credential theft on the page itself. The checkout path stays on the same domain — cart links point to the site's own /cart/ — so no cross-domain payment redirect was observed.