Is pz1d7.xyz safe?
http://pz1d7.xyz/
Coveragestrong4 of 6 applicable core capabilities
Young .xyz domain flagged as a suspicious shop and phishing risk, with a generic phone-and-password login form on the front page
pz1d7.xyz is a 173-day-old domain registered through Gname.com Pte. Ltd. with the owner's personal information withheld. Nine independent antivirus families returned an adverse result on the saved scan, and an external scanner classifies the site as a Suspicious Shop based on four blacklist detections, the very young domain and the absence of any established public user-review history. The page itself presents a generic 'Shop' login/registration form asking for a phone number and a password. The browser threat feed returned no warning and the saved TLS check found a valid encrypted connection, but those only mean no detections were recorded at scan time; they do not establish that the operator is trustworthy. Because the site's own contact details are script-rendered and were not reviewed, and because the adverse signals are strong and target-bound, the site sits in the High Risk band rather than Safe or Low Risk.
Be the first to review pz1d7.xyz
Lost money to pz1d7.xyz? Warn others
Loading saved screenshot
Preparing the saved page preview.
Where this site sits
- Dangerous1–20
- High Risk21–44
- Moderate Risk45–69
- Low Risk70–84
- Safe85–100
The score combines saved evidence strength and analysis quality. Coverage is reported separately.
01 · Investigation Brief
Investigation Brief
pz1d7.xyz is a 173-day-old domain registered through Gname.com Pte. Ltd. with the owner's personal information withheld. Nine independent antivirus families returned an adverse result on the saved scan, and an external scanner classifies the site as a Suspicious Shop based on four blacklist detections, the very young domain and the absence of any established public user-review history. The page itself presents a generic 'Shop' login/registration form asking for a phone number and a password. The browser threat feed returned no warning and the saved TLS check found a valid encrypted connection, but those only mean no detections were recorded at scan time; they do not establish that the operator is trustworthy. Because the site's own contact details are script-rendered and were not reviewed, and because the adverse signals are strong and target-bound, the site sits in the High Risk band rather than Safe or Low Risk.
What the adverse evidence actually shows
The saved antivirus observation records nine independent antivirus families reporting an adverse result. That is a real detection record, but it is a saved observation rather than a fresh submission, so its timing should be treated with caution. Separately, an external scanner classifies the site as a Suspicious Shop, citing four blacklist detections, a very young domain and no established public user-review history.
The domain itself was registered on May 4, 2026 through Gname.com Pte. Ltd., with the registrant's personal information withheld, and the registrable domain is only 173 days old. A short-lived, anonymously registered .xyz shop with multiple blacklist hits is a pattern that warrants caution, though age and anonymity alone are context rather than proof of a specific scam.
What a visitor actually sees and is asked to do
The page displays a login/registration form with a phone number input, pre-filled with the +503 El Salvador country code, and a password field, branded with a generic 'Shop' logo. A visitor arriving at this domain is being asked to hand over a phone number and a password before any goods, prices or seller identity are visible.
The site builds its content with scripts, so its own contact details were not visible to the page reader and were not reviewed. That means there is no verified business name, address or support channel visible on the page to check against the login prompt.
Technical checks versus operator risk
The browser threat feed returned no threat warning and the saved TLS check found a valid encrypted connection. Those are clean technical results, but they only mean no warning was recorded and the connection was encrypted at scan time; they say nothing about who runs the shop or whether orders and credentials are handled honestly.
Against that, the antivirus aggregate shows nine independent families reporting an adverse result, and the external scanner's Suspicious Shop classification cites four blacklist detections. The technical layer is not clean, and the operator layer is unverified: anonymous registration, a very young domain and a script-rendered page with no reviewable contact details.
Why the score is 38
9 independent antivirus families reported an adverse result. This comes from a saved antivirus observation rather than a new submission, so treat the detection as real but confirm the timing. Coverage remains separate so missing sources cannot be mistaken for clean results.
02 · Security Evidence
Security evidence
Antivirus Engines
13/ 92
detectionsSaved analysis from October 4, 2026 - stale
13 engines flagged this URL
Every saved adverse engine is listed below. The full provider matrix remains available for audit.
- Malicious
- 10
- Suspicious
- 3
- Total
- 92
| Engine | Finding |
|---|---|
| alphaMountain.aiMalicious | phishing |
| BitDefenderMalicious | phishing |
| CRDFMalicious | malicious |
| CyRadarMalicious | phishing |
| FortinetMalicious | phishing |
| G-DataMalicious | phishing |
| LionicMalicious | phishing |
| SophosMalicious | phishing |
| VIPREMalicious | phishing |
| WebrootMalicious | malicious |
| ESETSuspicious | suspicious |
| Forcepoint ThreatSeekerSuspicious | suspicious |
| GridinsoftSuspicious | suspicious |
All 92 engine results
- alphaMountain.ai - phishing - Malicious
- BitDefender - phishing - Malicious
- CRDF - Malicious
- CyRadar - phishing - Malicious
- Fortinet - phishing - Malicious
- G-Data - phishing - Malicious
- Lionic - phishing - Malicious
- Sophos - phishing - Malicious
- VIPRE - phishing - Malicious
- Webroot - Malicious
- ESET - Suspicious
- Forcepoint ThreatSeeker - Suspicious
- Gridinsoft - Suspicious
- 0xSI_f33d - Unrated
- Abusix - Clean
- Acronis - Clean
- ADMINUSLabs - Clean
- AILabs (MONITORAPP) - Clean
- AlienVault - Clean
- AlphaSOC - Unrated
- Antiy-AVL - Clean
- ArcSight Threat Intelligence - Unrated
- AutoShun - Unrated
- Bfore.Ai PreCrime - Unrated
- Bkav - Unrated
- BlockList - Clean
- Blueliv - Clean
- Certego - Clean
- ChainPatrol - Unrated
- Chong Lua Dao - Clean
- CINS Army - Clean
- Criminal IP - Unrated
- CSIS Security Group - Unrated
- CTX AI - Clean
- Cyan - Unrated
- Cyble - Clean
- desenmascara.me - Clean
- DNS8 - Unrated
- Dr.Web - Clean
- EmergingThreats - Clean
- Emsisoft - Clean
- Ermes - Unrated
- ESTsecurity - Clean
- Fortra - Unrated
- GCP Abuse Intelligence - Unrated
- Google Safe Browsing - Clean
- GreenSnow - Clean
- GreyNoise - Unrated
- Guardpot - Unrated
- Heimdal Security - Clean
- Hunt.io Intelligence - Unrated
- IPsum - Clean
- Juniper Networks - Clean
- K7AntiVirus - Unrated
- Kaspersky - Clean
- LevelBlue - Clean
- Lumu - Unrated
- Malwared - Clean
- MalwarePatrol - Clean
- MalwareURL - Unrated
- Mimecast - Unrated
- Netcraft - Unrated
- OpenPhish - Clean
- PhishFort - Unrated
- Phishing Database - Clean
- Phishtank - Clean
- PREBYTES - Clean
- PrecisionSec - Unrated
- Quick Heal - Clean
- Quttera - Clean
- Rising - Clean
- SafeToOpen - Unrated
- Sangfor - Clean
- Sansec eComscan - Unrated
- Scantitan - Clean
- SCUMWARE.org - Clean
- Seclookup - Clean
- Snort IP sample list - Unrated
- SOCRadar - Unrated
- StopForumSpam - Clean
- Sucuri SiteCheck - Clean
- Synthient - Unrated
- ThreatHive - Clean
- URLhaus - Clean
- URLQuery - Unrated
- Viettel Threat Intelligence - Clean
- ViriBack - Clean
- VX Vault - Clean
- Xcitium Verdict Cloud - Clean
- Yandex Safebrowsing - Clean
- ZeroCERT - Clean
- ZeroFox - Unrated
Security Scans
Checked against the browser threat feeds available to this scan — no hit.
What we observed
Loading saved screenshot
Preparing the saved page preview.
Visual context from the captured page
The page displays a login/registration form with a phone number input (pre-filled with +503, El Salvador) and a password field, branded with a generic 'Shop' logo.
What the captured page showed
1 observation- 01
The page displays a login/registration form with a phone number input (pre-filled with +503, El Salvador) and a password field, branded with a generic 'Shop' logo.
03 · Investigation Story
Investigation story
What the site claims
Shop
What we observed
The page content was captured and checked alongside 61 antivirus results.
What independent research found
2 external findings were saved and compared with the page evidence.
What remains unverified
2 of the 6 applicable core capabilities did not complete, so those gaps remain visible in the coverage ledger.
What kind of site and risk is this?
Threat category
Fake Shop & Commercial Deception
Service and business model
Shop
Observed behavior
Evidence behind this classification
- 019 independent antivirus families reported an adverse result. This comes from a saved antivirus observation rather than a new submission, so treat the detection as real but confirm the timing.
- 02One public warning on a scam-warning or security site: "This site is classified as Suspicious Shop based on multiple risk signals, including 4 blacklist detections, a very young domain (6 months), and no established…"
- 03The domain was registered May 4, 2026 through Gname.com Pte. Ltd. with personal information withheld, and the registrable domain is 173 days old.
Web research findings
Independent findings for pz1d7.xyz, including public complaints, named review sources, registration records, and look-alike-domain evidence. A missing result is shown as unverified, never converted into a clean bill of health.
- Gridinsoftopen
"This site is classified as Suspicious Shop based on multiple risk signals, including 4 blacklist detections, a very young domain (6 months), and no established public user-review history."
- Gridinsoftopen
"This domain was registered May 4, 2026 at 7:19 PM through the company Gname.com Pte. Ltd. (Personal information withheld)."
Reputation Sources
How this domain rates across independent threat-intelligence and blocklist providers.
04 · Domain & Infrastructure
Domain & infrastructure
The plumbing behind the site — who registered it, how it’s encrypted, where it’s hosted, and where it links out. A valid certificate or a calm server doesn’t mean the business is honest — scam sites pass these checks too. Use this to corroborate the verdict, not to overturn it.
Infrastructure map
How the saved page connected to the wider web.
- Domainpz1d7.xyz
- Redirects topz1d7.xyz
- Hosted byCloudflare, Inc.
- Referencesstatic.cloudflareinsights.com
Domain Timeline
- May 4, 2026Domain registered
First appeared in WHOIS records — 5 months old when this review was saved.
- Oct 25, 2026Saved security review — Rated High Risk
The completed checks from this saved scan are detailed above.
pz1d7.xyz was registered very recently when this review was saved and was already flagged. Freshly-registered domains are disproportionately used for scams, and a young domain with active threat signals warrants extra caution.
Contact Verification
Saved contact details can help identify the operator. Their presence supports traceability; it does not prove the business is trustworthy.
Domain & Encryption
Redirect Chain
- 1301http://pz1d7.xyz/
- 2200https://pz1d7.xyz/
Server Reputation
Referenced Domains
Outbound domains this page links to or loads resources from. Each links to its own security scan.
05 · Evidence Ledger
Evidence ledger
- Antiviruspartial
- Browser threat feedcomplete
- Page contentpartial
- Analysiscomplete
- Visual evidencecomplete
The conclusion is supported by the evidence saved with this report.
Technical threat
suspiciousMalware, phishing, credential theft and hostile infrastructure.
9 independent antivirus families reported an adverse result. This comes from a saved antivirus observation rather than a new submission, so treat the detection as real but confirm the timing.
Operator / customer risk
suspiciousComplaints, withdrawals, business conduct and commercial traps.
One public warning on a scam-warning or security site: "This site is classified as Suspicious Shop based on multiple risk signals, including 4 blacklist detections, a very young domain (6 months), and no established…" · The front page shows a login/registration form with a phone number input pre-filled with +503 and a password field, branded with a generic 'Shop' logo.
Source coverage and freshness
Status shows whether usable evidence was saved; finding shows what that evidence observed.
| Source | Result | Completion | Finding | Freshness |
|---|---|---|---|---|
| Antivirus | 13 of 92 engines flagged | Limited | Adverse | stale fallback · analysed Oct 4, 2026 |
| Browser protection | No browser threat-list match | Completed | No adverse finding | this scan · Oct 25, 2026 |
| Page content | Page fetched · HTTP 200 | Limited | No saved finding | this scan · Oct 25, 2026 |
| Visual evidence | 1 visible observation saved with the page capture | Completed | No adverse finding | this scan · Oct 25, 2026 |
| Independent research | 2 independent findings were saved | Completed | Adverse | this scan · Oct 25, 2026 |
- Antivirus
- Result13 of 92 engines flagged
- CompletionLimited
- FindingAdverse
- Freshnessstale fallback · analysed Oct 4, 2026
- Browser protection
- ResultNo browser threat-list match
- CompletionCompleted
- FindingNo adverse finding
- Freshnessthis scan · Oct 25, 2026
- Page content
- ResultPage fetched · HTTP 200
- CompletionLimited
- FindingNo saved finding
- Freshnessthis scan · Oct 25, 2026
- Visual evidence
- Result1 visible observation saved with the page capture
- CompletionCompleted
- FindingNo adverse finding
- Freshnessthis scan · Oct 25, 2026
- Independent research
- Result2 independent findings were saved
- CompletionCompleted
- FindingAdverse
- Freshnessthis scan · Oct 25, 2026
07 · Safety FAQ
Safety FAQ
Common questions, answered directly from the scan data above — so the answers reflect the saved verdict and evidence in this report.
Is pz1d7.xyz a scam or a legit online store?
Is pz1d7.xyz safe to use?
I already paid or entered my details on pz1d7.xyz — what should I do?
Can I get my money back from pz1d7.xyz?
I ordered from pz1d7.xyz but nothing arrived — is it a fake shop?
How do I report pz1d7.xyz?
pz1d7.xyz looks professional — how can it still be a scam?
Has pz1d7.xyz been flagged by antivirus engines?
Is pz1d7.xyz on any phishing or malware blacklists?
How old is the pz1d7.xyz domain?
Does pz1d7.xyz have a valid SSL certificate?
How often is the pz1d7.xyz report updated?
08 · Final Verdict
Final verdict
Young .xyz domain flagged as a suspicious shop and phishing risk, with a generic phone-and-password login form on the front page
pz1d7.xyz is a 173-day-old domain registered through Gname.com Pte. Ltd. with the owner's personal information withheld. Nine independent antivirus families returned an adverse result on the saved scan, and an external scanner classifies the site as a Suspicious Shop based on four blacklist detections, the very young domain and the absence of any established public user-review history. The page itself presents a generic 'Shop' login/registration form asking for a phone number and a password. The browser threat feed returned no warning and the saved TLS check found a valid encrypted connection, but those only mean no detections were recorded at scan time; they do not establish that the operator is trustworthy. Because the site's own contact details are script-rendered and were not reviewed, and because the adverse signals are strong and target-bound, the site sits in the High Risk band rather than Safe or Low Risk.
09 · Community