Is pengfactory.com safe?
http://pengfactory.com/
Coveragestrong3 of 4 applicable core capabilities
Peng Factory is a 67-day-old peptide storefront with no verifiable operator identity and free-mail support
Peng Factory presents itself as a shop selling peptide products through a Shoplazza-hosted storefront, with a PayPal payment option visible in the interface. The domain is only 67 days old, no operator postal address is shown on the captured page, and customer support is routed to a free outlook.com inbox rather than a mailbox on the store's own domain. Technical checks are clean — no Safe Browsing warning and a valid encrypted connection — but those results only mean no detections were found, not that the operator is trustworthy. Because the store is new, the operator is not disclosed, and the only contact route is a free-mail address, there is not enough verified information to treat this as a safe place to send money. The score reflects a moderate-risk profile: no confirmed fraud mechanism was observed, but the transparency gaps are material for a shop that takes payment.
Be the first to review pengfactory.com
Lost money to pengfactory.com? Warn others
Loading saved screenshot
Preparing the saved page preview.
Where this site sits
- Dangerous1–20
- High Risk21–44
- Moderate Risk45–69
- Low Risk70–84
- Safe85–100
The score combines saved evidence strength and analysis quality. Coverage is reported separately.
01 · Investigation Brief
Investigation Brief
Peng Factory presents itself as a shop selling peptide products through a Shoplazza-hosted storefront, with a PayPal payment option visible in the interface. The domain is only 67 days old, no operator postal address is shown on the captured page, and customer support is routed to a free outlook.com inbox rather than a mailbox on the store's own domain. Technical checks are clean — no Safe Browsing warning and a valid encrypted connection — but those results only mean no detections were found, not that the operator is trustworthy. Because the store is new, the operator is not disclosed, and the only contact route is a free-mail address, there is not enough verified information to treat this as a safe place to send money. The score reflects a moderate-risk profile: no confirmed fraud mechanism was observed, but the transparency gaps are material for a shop that takes payment.
Operator identity is not verifiable from the site
The captured page shows no operator postal address, so a buyer cannot confirm where the business is registered or where goods would ship from. The store does list a support email on its own domain and a phone number, which are positive contact signals, but the presence of a free outlook.com inbox alongside them weakens the picture: support correspondence can be routed to an account that is not tied to the store's domain and can be abandoned without trace.
The domain itself is only 67 days old, which is consistent with a newly established storefront rather than an established business with a track record. A new domain is not proof of wrongdoing, but combined with the missing postal address and free-mail support it means there is no independent way to verify who is behind the shop or how long they have operated.
Clean technical checks do not resolve the operator risk
The browser threat feed returned no threat warning for the site, and the saved TLS check found a valid encrypted connection. Those results mean the page was not flagged for malware or an invalid certificate at the time of the scan; they say nothing about whether the seller will deliver goods, honour refunds, or handle payment data responsibly.
Independent research identified the store as a Shoplazza-based shopfront in a Science category listing, which confirms the platform and category but does not vouch for the operator. No confirmed risk mechanics, no affiliate relationships, and no adverse customer reports were recorded in our review, so the assessment rests on the transparency gaps rather than on observed fraud.
What a visitor actually encounters
A visitor browsing the store sees product-browsing controls labelled 'Premium Products' and 'Load More', which are the storefront's own navigation elements for paging through the catalogue. A PayPal payment mark is visible in the interface, indicating the store presents PayPal as a payment route.
Because the operator is not disclosed and the only support channel includes a free-mail inbox, a buyer who pays has limited recourse if an order goes wrong: there is no postal address to serve notice to and no established reputation to appeal to. That is the practical exposure created by the transparency gaps, not a confirmed non-delivery event.
Why the score is 58
The store's contact address is a free-mail inbox (outlook.com) rather than a mailbox on its own domain. Coverage remains separate so missing sources cannot be mistaken for clean results.
02 · Security Evidence
Security evidence
Antivirus Engines
0/ 92
No detectionsSaved analysis from October 1, 2026 - stale
No detections across 57 engines that rated this URL
No antivirus engine that answered raised an adverse result; 35 had no rating for this URL. This is one signal, not a guarantee.
- Malicious
- 0
- Suspicious
- 0
- Total
- 92
All 92 engine results
- 0xSI_f33d - Unrated
- Abusix - Clean
- Acronis - Clean
- ADMINUSLabs - Clean
- AILabs (MONITORAPP) - Clean
- AlienVault - Clean
- alphaMountain.ai - Unrated
- AlphaSOC - Unrated
- Antiy-AVL - Clean
- ArcSight Threat Intelligence - Unrated
- AutoShun - Unrated
- Bfore.Ai PreCrime - Unrated
- BitDefender - Clean
- Bkav - Unrated
- BlockList - Clean
- Blueliv - Clean
- Certego - Clean
- ChainPatrol - Unrated
- Chong Lua Dao - Clean
- CINS Army - Clean
- CRDF - Clean
- Criminal IP - Unrated
- CSIS Security Group - Unrated
- CTX AI - Clean
- Cyan - Unrated
- Cyble - Clean
- CyRadar - Clean
- desenmascara.me - Clean
- DNS8 - Unrated
- Dr.Web - Clean
- EmergingThreats - Clean
- Emsisoft - Clean
- Ermes - Unrated
- ESET - Clean
- ESTsecurity - Clean
- Forcepoint ThreatSeeker - Clean
- Fortinet - Clean
- Fortra - Unrated
- G-Data - Clean
- GCP Abuse Intelligence - Unrated
- Google Safe Browsing - Clean
- GreenSnow - Clean
- GreyNoise - Unrated
- Gridinsoft - Unrated
- Guardpot - Unrated
- Heimdal Security - Clean
- Hunt.io Intelligence - Unrated
- IPsum - Clean
- Juniper Networks - Clean
- K7AntiVirus - Unrated
- Kaspersky - Unrated
- LevelBlue - Clean
- Lionic - Clean
- Lumu - Unrated
- Malwared - Clean
- MalwarePatrol - Clean
- MalwareURL - Unrated
- Mimecast - Unrated
- Netcraft - Unrated
- OpenPhish - Clean
- PhishFort - Unrated
- Phishing Database - Clean
- Phishtank - Clean
- PREBYTES - Clean
- PrecisionSec - Unrated
- Quick Heal - Clean
- Quttera - Clean
- Rising - Clean
- SafeToOpen - Unrated
- Sangfor - Clean
- Sansec eComscan - Unrated
- Scantitan - Clean
- SCUMWARE.org - Clean
- Seclookup - Clean
- Snort IP sample list - Unrated
- SOCRadar - Unrated
- Sophos - Clean
- StopForumSpam - Clean
- Sucuri SiteCheck - Clean
- Synthient - Unrated
- ThreatHive - Clean
- URLhaus - Clean
- URLQuery - Unrated
- Viettel Threat Intelligence - Clean
- VIPRE - Unrated
- ViriBack - Clean
- VX Vault - Clean
- Webroot - Clean
- Xcitium Verdict Cloud - Clean
- Yandex Safebrowsing - Clean
- ZeroCERT - Clean
- ZeroFox - Unrated
Security Scans
Checked against the browser threat feeds available to this scan — no hit.
What we observed
Loading saved screenshot
Preparing the saved page preview.
Visual context from the captured page
PayPal
What the captured page showed
1 observation- 01
PayPal
03 · Investigation Story
Investigation story
What the site claims
pengfactory
What we observed
The page content was captured and checked alongside 57 antivirus results.
What independent research found
1 external finding was saved and compared with the page evidence.
What remains unverified
1 of the 4 applicable core capabilities did not complete, so those gaps remain visible in the coverage ledger.
What kind of site and risk is this?
Threat category
Fake Shop & Commercial Deception
Service and business model
Shop
Observed behavior
Evidence behind this classification
- 01The registrable domain is 67 days old, consistent with a newly established storefront.
- 02No operator postal address is visible on the captured page.
- 03The store's contact address is a free-mail inbox (outlook.com) rather than a mailbox on its own domain.
Web research findings
Independent findings for pengfactory.com, including public complaints, named review sources, registration records, and look-alike-domain evidence. A missing result is shown as unverified, never converted into a clean bill of health.
No independently sourced scam reports or credibility records were found for pengfactory.com. That is common for new or low-traffic sites and does not clear the site.
Reputation Sources
How this domain rates across independent threat-intelligence and blocklist providers.
04 · Domain & Infrastructure
Domain & infrastructure
The plumbing behind the site — who registered it, how it’s encrypted, where it’s hosted, and where it links out. A valid certificate or a calm server doesn’t mean the business is honest — scam sites pass these checks too. Use this to corroborate the verdict, not to overturn it.
Infrastructure map
How the saved page connected to the wider web.
- Domainpengfactory.com
- Redirects towww.pengfactory.com
- Hosted byCloudflare, Inc.
- Referencesimg.staticdj.com · static.staticdj.com
Domain Timeline
- Aug 19, 2026Domain registered
First appeared in WHOIS records — 67 days old when this review was saved.
- Oct 25, 2026Saved security review — Rated Moderate Risk
The evidence in this saved scan is mixed or incomplete; the completed checks are detailed above.
pengfactory.com was registered very recently when this review was saved. Freshly-registered domains are disproportionately used for scams, so a young domain whose evidence is mixed or incomplete warrants extra caution.
Contact Verification
Saved contact details can help identify the operator. Their presence supports traceability; it does not prove the business is trustworthy.
- No operator postal address visible on the captured page.
- Contact email on the site's own domain (support@pengfactory.com).
- Phone number listed (+852 44168369).
Domain & Encryption
Redirect Chain
- 1301http://pengfactory.com/
- 2301https://pengfactory.com/
- 3200https://www.pengfactory.com/
Server Reputation
Referenced Domains
Outbound domains this page links to or loads resources from. Each links to its own security scan.
05 · Evidence Ledger
Evidence ledger
- Antiviruspartial
- Browser threat feedcomplete
- Page contentcomplete
- Analysiscomplete
- Visual evidencecomplete
The conclusion is supported by the evidence saved with this report.
Technical threat
unknownMalware, phishing, credential theft and hostile infrastructure.
No confirmed evidence in this dimension.
Operator / customer risk
suspiciousComplaints, withdrawals, business conduct and commercial traps.
The store's contact address is a free-mail inbox (outlook.com) rather than a mailbox on its own domain. · No operator postal address is visible on the captured page.
Source coverage and freshness
Status shows whether usable evidence was saved; finding shows what that evidence observed.
| Source | Result | Completion | Finding | Freshness |
|---|---|---|---|---|
| Antivirus | 0 of 92 engines flagged | Limited | No saved finding | stale fallback · analysed Oct 1, 2026 |
| Browser protection | No browser threat-list match | Completed | No adverse finding | this scan · Oct 25, 2026 |
| Page content | Page fetched · HTTP 200 | Completed | No adverse finding | this scan · Oct 25, 2026 |
| Visual evidence | 1 visible observation saved with the page capture | Completed | No adverse finding | this scan · Oct 25, 2026 |
| Independent research | 1 independent finding was saved | Completed | No adverse finding | this scan · Oct 25, 2026 |
- Antivirus
- Result0 of 92 engines flagged
- CompletionLimited
- FindingNo saved finding
- Freshnessstale fallback · analysed Oct 1, 2026
- Browser protection
- ResultNo browser threat-list match
- CompletionCompleted
- FindingNo adverse finding
- Freshnessthis scan · Oct 25, 2026
- Page content
- ResultPage fetched · HTTP 200
- CompletionCompleted
- FindingNo adverse finding
- Freshnessthis scan · Oct 25, 2026
- Visual evidence
- Result1 visible observation saved with the page capture
- CompletionCompleted
- FindingNo adverse finding
- Freshnessthis scan · Oct 25, 2026
- Independent research
- Result1 independent finding was saved
- CompletionCompleted
- FindingNo adverse finding
- Freshnessthis scan · Oct 25, 2026
07 · Safety FAQ
Safety FAQ
Common questions, answered directly from the scan data above — so the answers reflect the saved verdict and evidence in this report.
Is pengfactory.com a scam or is it safe?
Is pengfactory.com safe to use?
Has pengfactory.com been flagged by antivirus engines?
Is pengfactory.com on any phishing or malware blacklists?
How old is the pengfactory.com domain?
Does pengfactory.com have a valid SSL certificate?
Where is pengfactory.com hosted?
How often is the pengfactory.com report updated?
08 · Final Verdict
Final verdict
Peng Factory is a 67-day-old peptide storefront with no verifiable operator identity and free-mail support
Peng Factory presents itself as a shop selling peptide products through a Shoplazza-hosted storefront, with a PayPal payment option visible in the interface. The domain is only 67 days old, no operator postal address is shown on the captured page, and customer support is routed to a free outlook.com inbox rather than a mailbox on the store's own domain. Technical checks are clean — no Safe Browsing warning and a valid encrypted connection — but those results only mean no detections were found, not that the operator is trustworthy. Because the store is new, the operator is not disclosed, and the only contact route is a free-mail address, there is not enough verified information to treat this as a safe place to send money. The score reflects a moderate-risk profile: no confirmed fraud mechanism was observed, but the transparency gaps are material for a shop that takes payment.
09 · Community