Is oxygn.store safe?
http://oxygn.store/
Coveragestrong5 of 6 applicable core capabilities
Oxygn is an anonymous Shopify apparel storefront flagged by two antivirus families and tied to a domain-permutation network.
oxygn.store presents itself as a Shopify-based clothing shop selling printed apparel, with a cart, product pages and a German-language returns policy. Two independent antivirus families have flagged the domain as adverse, and the domain appears in a DNS listing alongside numerous similar-looking permutations, a pattern typical of automated shop networks. The storefront discloses no operator name, no postal address and no phone number, and its brand name closely echoes an established fragrance and apparel label. The site's own pages were captured and reviewed, so this is not an unread-page case, but the combination of vendor detections, network association and absent accountability places it in the High Risk band.
Be the first to review oxygn.store
Lost money to oxygn.store? Warn others
Did you buy from oxygn.store?
Loading saved screenshot
Preparing the saved page preview.
Follow oxygn.store
Get a notification in your MalwareTips bell when new reviews arrive (one digest a day at most), when the verdict changes after a rescan, and when MalwareTips or the verified site owner replies. Unfollow any time.
Where this site sits
- Dangerous1–20
- High Risk21–44
- Moderate Risk45–69
- Low Risk70–84
- Safe85–100
The score combines saved evidence strength and analysis quality. Coverage is reported separately.
01 · Investigation Brief
Investigation Brief
oxygn.store presents itself as a Shopify-based clothing shop selling printed apparel, with a cart, product pages and a German-language returns policy. Two independent antivirus families have flagged the domain as adverse, and the domain appears in a DNS listing alongside numerous similar-looking permutations, a pattern typical of automated shop networks. The storefront discloses no operator name, no postal address and no phone number, and its brand name closely echoes an established fragrance and apparel label. The site's own pages were captured and reviewed, so this is not an unread-page case, but the combination of vendor detections, network association and absent accountability places it in the High Risk band.
Vendor detections and a permutation-network footprint
Two independent antivirus families returned an adverse result for this domain. The saved observation is marked stale, so the detection should be treated as real but not necessarily reflecting the site's current state; it is still a meaningful adverse signal that cannot be dismissed.
The domain also appears in a DNS lookup listing alongside a large set of similar-looking permutations. That kind of clustering is characteristic of automated or bulk-registered shop networks rather than a single curated retail brand.
On the supportive side, the browser threat feed returned no threat warning and the saved TLS check found a valid encrypted connection. These are clean technical checks, not evidence of operator legitimacy, and they do not offset the vendor detections above.
No verifiable operator behind the storefront
The captured pages list no phone number and no operator postal address. A contact form exists with name, email and telephone fields, but the only direct contact channel is a generic mailbox on the site's own domain. That mailbox is a minor positive, but it does not substitute for a named legal entity or a physical address.
The brand name 'Oxygn' closely echoes an established fragrance and apparel label that independent coverage praises for value. The overlap is not proof of impersonation, but it increases the chance that a visitor arrives expecting a different, established retailer.
The registrable domain is 378 days old, which is long enough to be past the brand-new-domain stage but not long enough to establish a track record. Combined with the absent operator details, it does not provide the accountability a buyer would need to pursue a problem.
Why the score is 38
2 independent antivirus families reported an adverse result. This comes from a saved antivirus observation rather than a new submission, so treat the detection as real but confirm the timing. Coverage remains separate so missing sources cannot be mistaken for clean results.
02 · Security Evidence
Security evidence
Antivirus Engines
2/ 93
detectionsSaved analysis from October 6, 2026 - stale
2 engines flagged this URL
Every saved adverse engine is listed below. The full provider matrix remains available for audit.
- Malicious
- 2
- Suspicious
- 0
- Total
- 93
| Engine | Finding |
|---|---|
| alphaMountain.aiMalicious | malicious |
| FortinetMalicious | malware |
All 93 engine results
- alphaMountain.ai - Malicious
- Fortinet - malware - Malicious
- 0xSI_f33d - Unrated
- Abusix - Clean
- Acronis - Clean
- ADMINUSLabs - Clean
- AILabs (MONITORAPP) - Clean
- AlienVault - Clean
- AlphaSOC - Unrated
- Antiy-AVL - Clean
- ArcSight Threat Intelligence - Unrated
- AutoShun - Unrated
- Bfore.Ai PreCrime - Unrated
- BitDefender - Clean
- Bkav - Unrated
- BlockList - Clean
- Blueliv - Clean
- Certego - Clean
- ChainPatrol - Unrated
- Chong Lua Dao - Clean
- CINS Army - Clean
- CRDF - Clean
- Criminal IP - Unrated
- CSIS Security Group - Unrated
- CTX AI - Clean
- Cyan - Unrated
- Cyble - Clean
- CyRadar - Clean
- desenmascara.me - Clean
- DNS8 - Unrated
- Dr.Web - Clean
- EmergingThreats - Clean
- Emsisoft - Clean
- Ermes - Unrated
- ESET - Clean
- ESTsecurity - Clean
- Forcepoint ThreatSeeker - Clean
- Fortra - Unrated
- G-Data - Clean
- GCP Abuse Intelligence - Unrated
- Google Safe Browsing - Clean
- GreenSnow - Clean
- GreyNoise - Unrated
- Gridinsoft - Unrated
- Guardpot - Unrated
- Heimdal Security - Clean
- Hunt.io Intelligence - Unrated
- IPsum - Clean
- Juniper Networks - Clean
- K7AntiVirus - Unrated
- Kaspersky - Clean
- LevelBlue - Clean
- Lionic - Clean
- Lumu - Unrated
- Malwared - Clean
- MalwarePatrol - Clean
- MalwareURL - Unrated
- Mimecast - Unrated
- Netcraft - Unrated
- OpenPhish - Clean
- Orcapot - Unrated
- PhishFort - Unrated
- Phishing Database - Clean
- Phishtank - Clean
- PREBYTES - Clean
- PrecisionSec - Unrated
- Quick Heal - Clean
- Quttera - Clean
- Rising - Clean
- SafeToOpen - Unrated
- Sangfor - Clean
- Sansec eComscan - Unrated
- Scantitan - Clean
- SCUMWARE.org - Clean
- Seclookup - Clean
- Snort IP sample list - Unrated
- SOCRadar - Unrated
- Sophos - Clean
- StopForumSpam - Clean
- Sucuri SiteCheck - Clean
- Synthient - Unrated
- ThreatHive - Clean
- URLhaus - Clean
- URLQuery - Unrated
- Viettel Threat Intelligence - Clean
- VIPRE - Unrated
- ViriBack - Clean
- VX Vault - Clean
- Webroot - Clean
- Xcitium Verdict Cloud - Clean
- Yandex Safebrowsing - Clean
- ZeroCERT - Clean
- ZeroFox - Unrated
Security Scans
Checked against the browser threat feeds available to this scan — no hit.
What we observed
Loading saved screenshot
Preparing the saved page preview.
Visual context from the captured page
Erstkunden SALE! Jetzt 10% Sparen Nur für die Kollektion von BEYOND LIMITS ! MEMBER10 WEITER SHOPPEN
What the captured page showed
1 observation- 01
Erstkunden SALE! Jetzt 10% Sparen Nur für die Kollektion von BEYOND LIMITS ! MEMBER10 WEITER SHOPPEN
03 · Investigation Story
Investigation story
What the site claims
Oxygn
What we observed
The page content was captured and checked alongside 59 antivirus results.
What independent research found
3 external findings were saved and compared with the page evidence.
What remains unverified
1 of the 6 applicable core capabilities did not complete, so those gaps remain visible in the coverage ledger.
What kind of site and risk is this?
Threat category
Fake Shop & Commercial Deception
Service and business model
Shop
Observed behavior
Evidence behind this classification
- 012 independent antivirus families reported an adverse result. This comes from a saved antivirus observation rather than a new submission, so treat the detection as real but confirm the timing.
- 02The domain appears in a DNS listing alongside numerous similar-looking permutations, a footprint associated with bulk or automated shop networks.
- 03No phone number is listed on the captured page.
If this is a scam — what it means for you
What a visitor actually experiences
A visitor arriving at oxygn.store is met with a first-customer sale pop-up offering a 10% discount code for a specific collection, then browses apparel and adds items to a cart. The cart is the site's own transactional endpoint, so any purchase is a direct transaction with this storefront rather than a redirect to a third-party marketplace.
If this is a scam, how it works
The evidence-backed path
Each stage below is preserved from the grounded analysis and linked to saved evidence.
The site publishes a returns and cancellations policy, which is a normal retail signal, but with no operator name, address or phone number behind it, a buyer who needs to enforce that policy has no practical escalation path.
The storefront also links out to Instagram and to Shopify-hosted pages, which is consistent with a standard hosted shop build rather than a bespoke platform.
Do not enter payment details on oxygn.store. The domain carries adverse antivirus detections and appears in a permutation-network listing, and the storefront discloses no operator name, address or phone number, so a buyer would have no recourse if an order went wrong. If you want this style of printed apparel, buy from a retailer with a verifiable legal entity and a track record you can check independently.
Web research findings
Independent findings for oxygn.store, including public complaints, named review sources, registration records, and look-alike-domain evidence. A missing result is shown as unverified, never converted into a clean bill of health.
- DNS Ninjaopen
"oxygn.store"
Reputation Sources
How this domain rates across independent threat-intelligence and blocklist providers.
04 · Domain & Infrastructure
Domain & infrastructure
The plumbing behind the site — who registered it, how it’s encrypted, where it’s hosted, and where it links out. A valid certificate or a calm server doesn’t mean the business is honest — scam sites pass these checks too. Use this to corroborate the verdict, not to overturn it.
Infrastructure map
How the saved page connected to the wider web.
- Domainoxygn.store
- Redirects tooxygn.store
- Hosted byShopify, Inc.
- Referencesfonts.shopifycdn.com · shop.app
Domain Timeline
- Oct 12, 2025Domain registered
First appeared in WHOIS records — 1 year old when this review was saved.
- Oct 25, 2026Saved security review — Rated High Risk
The completed checks from this saved scan are detailed above.
Contact Verification
Saved contact details can help identify the operator. Their presence supports traceability; it does not prove the business is trustworthy.
- No phone number listed on the captured page.
- No operator postal address visible on the captured page.
- Contact email on the site's own domain (info@oxygn.store).
- Links to 4 social profiles.
Domain & Encryption
Redirect Chain
- 1301http://oxygn.store/
- 2200https://oxygn.store/
Server Reputation
Referenced Domains
Outbound domains this page links to or loads resources from. Each links to its own security scan.
05 · Evidence Ledger
Evidence ledger
- Antiviruspartial
- Browser threat feedcomplete
- Page contentcomplete
- Analysiscomplete
- Visual evidencecomplete
The conclusion is supported by the evidence saved with this report.
Technical threat
suspiciousMalware, phishing, credential theft and hostile infrastructure.
2 independent antivirus families reported an adverse result. This comes from a saved antivirus observation rather than a new submission, so treat the detection as real but confirm the timing.
Operator / customer risk
unknownComplaints, withdrawals, business conduct and commercial traps.
The domain appears in a DNS listing alongside numerous similar-looking permutations, a footprint associated with bulk or automated shop networks. · No phone number is listed on the captured page.
Source coverage and freshness
Status shows whether usable evidence was saved; finding shows what that evidence observed.
| Source | Result | Completion | Finding | Freshness |
|---|---|---|---|---|
| Antivirus | 2 of 93 engines flagged | Limited | Adverse | stale fallback · analysed Oct 6, 2026 |
| Browser protection | No browser threat-list match | Completed | No adverse finding | this scan · Oct 25, 2026 |
| Page content | Page fetched · HTTP 200 | Completed | No adverse finding | this scan · Oct 25, 2026 |
| Visual evidence | 1 visible observation saved with the page capture | Completed | No adverse finding | this scan · Oct 25, 2026 |
| Independent research | 3 independent findings were saved | Completed | No adverse finding | this scan · Oct 25, 2026 |
- Antivirus
- Result2 of 93 engines flagged
- CompletionLimited
- FindingAdverse
- Freshnessstale fallback · analysed Oct 6, 2026
- Browser protection
- ResultNo browser threat-list match
- CompletionCompleted
- FindingNo adverse finding
- Freshnessthis scan · Oct 25, 2026
- Page content
- ResultPage fetched · HTTP 200
- CompletionCompleted
- FindingNo adverse finding
- Freshnessthis scan · Oct 25, 2026
- Visual evidence
- Result1 visible observation saved with the page capture
- CompletionCompleted
- FindingNo adverse finding
- Freshnessthis scan · Oct 25, 2026
- Independent research
- Result3 independent findings were saved
- CompletionCompleted
- FindingNo adverse finding
- Freshnessthis scan · Oct 25, 2026
07 · Safety FAQ
Safety FAQ
Common questions, answered directly from the scan data above — so the answers reflect the saved verdict and evidence in this report.
Is oxygn.store a scam or a legit online store?
Is oxygn.store safe to use?
What should I do if I already gave my details to oxygn.store?
Can I get my money back from oxygn.store?
I ordered from oxygn.store but nothing arrived — is it a fake shop?
How do I report oxygn.store?
Why does oxygn.store look legitimate if it's a scam?
Has oxygn.store been flagged by antivirus engines?
Is oxygn.store on any phishing or malware blacklists?
How old is the oxygn.store domain?
Does oxygn.store have a valid SSL certificate?
How often is the oxygn.store report updated?
08 · Final Verdict
Final verdict
Oxygn is an anonymous Shopify apparel storefront flagged by two antivirus families and tied to a domain-permutation network.
oxygn.store presents itself as a Shopify-based clothing shop selling printed apparel, with a cart, product pages and a German-language returns policy. Two independent antivirus families have flagged the domain as adverse, and the domain appears in a DNS listing alongside numerous similar-looking permutations, a pattern typical of automated shop networks. The storefront discloses no operator name, no postal address and no phone number, and its brand name closely echoes an established fragrance and apparel label. The site's own pages were captured and reviewed, so this is not an unread-page case, but the combination of vendor detections, network association and absent accountability places it in the High Risk band.
09 · Community
Community
Are you the owner of oxygn.store?Verify and reply