MalwareTipsTools

Bought from thrifteez.store? Rate it and warn othersBought here? Warn othersRate it · review · follow updates

Rate thrifteez.store

One tap is enough. Reviews are moderated and never change our Safety Score.

Is thrifteez.store safe?

http://thrifteez.store/

Moderate RiskStatus
Community ratingNo reviews yet · Write oneCommunity reviews are separate from our Safety Score.

Checked on

How we checked

Coverage: complete · 6 of 6 applicable core capabilities

  • Antivirus (57 of 93 engines answered): completed
  • Google Safe Browsing: completed
  • page reading: completed
  • page capture: completed
  • domain records: completed
  • web research: completed
Verdict

Three-day-old Shopify shoe store with no named owner, no address, no phone and only a Gmail inbox for contact

thrifteez.store is a Shopify storefront selling 'branded' sneakers (361, Adidas, New Balance) in Pakistani rupees, with sale prices around Rs.2,250–2,850. Nothing technical is wrong with it — no malware or phishing detections, a valid encrypted connection and no Safe Browsing warning — but the shop itself gives a buyer almost nothing to check: the domain was three days old at review, no operator name, company registration, postal address or phone number appears on the pages, and the only contact route is a free Gmail inbox. That combination of a brand-new shop, undisclosed seller and unverifiable branded goods puts it in the moderate-risk band rather than the safe one.

Treat this as an unproven shop rather than a safe one. If you want the shoes, pay with a method that can be reversed, keep the order confirmation, and test the seller with a small order first — the three-day return window and a Gmail-only contact give you little recourse if the goods never arrive or turn out not to be genuine. Buying branded footwear from a seller who publishes no name, address or phone number is a gamble on a shop that is only days old.

Tell us the verdict looks wrong

thrifteez.store · Staff read every report. Your message is never published, and feedback never changes the score automatically.

What looks wrong?

Share this report

thrifteez.store: Moderate Risk — MalwareTips website safety report

Calibrated safety spectrum

Where this site sits

  1. Dangerous1–20
  2. High Risk21–44
  3. Moderate Risk45–69
  4. Low Risk70–84
  5. Safe85–100

The score combines saved evidence strength and analysis quality. Coverage is reported separately.

Score explained

Why 52/100

Moderate Risk covers scores 45–69. 4 findings pulled the score down; 1 pushed it up.

What pulled the score down

  1. ModerateThe store's contact address is a free-mail inbox (gmail.com) rather than a mailbox on its own domain.-23 pts
  2. MinorNo operator name, phone number or postal address appears on the captured pages.
  3. MinorNo contact email uses the site's own domain.
  4. MinorThe only published contact is a free Gmail inbox, not a mailbox on the store's own domain.

What pushed the score up

  • SupportsNo malware or phishing detections, no Safe Browsing warning and a valid encrypted connection.

Points come from the saved evidence ledger: it lowered the score from 75 to 52 and split those 23 points between the findings that show points; the others carry no points in the ledger.

01 · Investigation Brief

Investigation Brief

thrifteez.store is a Shopify storefront selling 'branded' sneakers (361, Adidas, New Balance) in Pakistani rupees, with sale prices around Rs.2,250–2,850. Nothing technical is wrong with it — no malware or phishing detections, a valid encrypted connection and no Safe Browsing warning — but the shop itself gives a buyer almost nothing to check: the domain was three days old at review, no operator name, company registration, postal address or phone number appears on the pages, and the only contact route is a free Gmail inbox. That combination of a brand-new shop, undisclosed seller and unverifiable branded goods puts it in the moderate-risk band rather than the safe one.

Who is selling, and where

The captured pages name no operator, no company registration, no postal address and no phone number. The rendered storefront shows no business name, address, phone number, payment badges or trust seals anywhere in view, so a buyer cannot tell who they are paying or where the seller is located.

The only contact channel published is a free Gmail inbox, thrifteezstore1@gmail.com, given in the refund policy for return and refund requests. No contact address uses the store's own domain, which is a pattern shared by some small real stores but also by fake-shop kits.

The registrable domain was three days old at the time of review, so there is no trading history behind the shop and no independent record of how it has handled past orders.

Clean technical checks, unverified seller

Automated checks came back clean: 0 malicious and 0 suspicious detections across 93 engines, no browser threat feed threat warning, a valid encrypted connection, and a hosting IP with an abuse confidence score of 0/100. Nothing in the rendering suggested popups, forced redirects, downloads or notification prompts.

Those results only show the site is not currently serving malware or a phishing page. They say nothing about whether the seller ships what is ordered, whether the branded shoes are genuine, or whether the three-day return window is honoured — and independent web research returned no material on this domain either way, so the operator's reputation is unverified.

What happens when you try to buy

Product tiles list branded running shoes with struck-through prices and sale prices, for example 361 branded running shoes at Rs.3,250 reduced to Rs.2,850 and Adidas shoes at Rs.2,999 reduced to Rs.2,450. One listing is labelled 'IMPORTED AMERICAN SHOES'. No authenticity, provenance or shipping-origin information accompanies these listings.

The purchase controls — 'Add', 'Add to cart' and 'Buy it now' — and the 'Shop now' links all stay on thrifteez.store and lead to the store's own cart and product pages. No cross-domain payment processor, affiliate redirect or third-party checkout was observed in the captured flow.

Returns are limited to three days after receipt, and refund requests go to the Gmail address. A short window handled through a free mailbox gives a buyer little leverage if an order goes wrong.

Why the score is 52

The store's contact address is a free-mail inbox (gmail.com) rather than a mailbox on its own domain.

02 · Security Evidence

Security evidence

Antivirus Engines

0/ 93

No detections

Fresh result

No detections across 57 engines that rated this URL

No antivirus engine that answered raised an adverse result; 36 had no rating for this URL. This is one signal, not a guarantee.

Malicious
0
Suspicious
0
Total
93
All 93 engine results
  • 0xSI_f33d - Unrated
  • Abusix - Clean
  • Acronis - Clean
  • ADMINUSLabs - Clean
  • AILabs (MONITORAPP) - Clean
  • AlienVault - Clean
  • alphaMountain.ai - Unrated
  • AlphaSOC - Unrated
  • Antiy-AVL - Clean
  • ArcSight Threat Intelligence - Unrated
  • AutoShun - Unrated
  • Bfore.Ai PreCrime - Unrated
  • BitDefender - Clean
  • Bkav - Unrated
  • BlockList - Clean
  • Blueliv - Clean
  • Certego - Clean
  • ChainPatrol - Unrated
  • Chong Lua Dao - Clean
  • CINS Army - Clean
  • CRDF - Clean
  • Criminal IP - Unrated
  • CSIS Security Group - Unrated
  • CTX AI - Clean
  • Cyan - Unrated
  • Cyble - Clean
  • CyRadar - Clean
  • desenmascara.me - Clean
  • DNS8 - Unrated
  • Dr.Web - Clean
  • EmergingThreats - Clean
  • Emsisoft - Clean
  • Ermes - Unrated
  • ESET - Clean
  • ESTsecurity - Clean
  • Forcepoint ThreatSeeker - Clean
  • Fortinet - Clean
  • Fortra - Unrated
  • G-Data - Clean
  • GCP Abuse Intelligence - Unrated
  • Google Safe Browsing - Clean
  • GreenSnow - Clean
  • GreyNoise - Unrated
  • Gridinsoft - Unrated
  • Guardpot - Unrated
  • Heimdal Security - Clean
  • Hunt.io Intelligence - Unrated
  • IPsum - Clean
  • Juniper Networks - Clean
  • K7AntiVirus - Unrated
  • Kaspersky - Unrated
  • LevelBlue - Clean
  • Lionic - Clean
  • Lumu - Unrated
  • Malwared - Clean
  • MalwarePatrol - Clean
  • MalwareURL - Unrated
  • Mimecast - Unrated
  • Netcraft - Unrated
  • OpenPhish - Clean
  • Orcapot - Unrated
  • PhishFort - Unrated
  • Phishing Database - Clean
  • Phishtank - Clean
  • PREBYTES - Clean
  • PrecisionSec - Unrated
  • Quick Heal - Clean
  • Quttera - Clean
  • Rising - Clean
  • SafeToOpen - Unrated
  • Sangfor - Clean
  • Sansec eComscan - Unrated
  • Scantitan - Clean
  • SCUMWARE.org - Clean
  • Seclookup - Clean
  • Snort IP sample list - Unrated
  • SOCRadar - Unrated
  • Sophos - Clean
  • StopForumSpam - Clean
  • Sucuri SiteCheck - Clean
  • Synthient - Unrated
  • ThreatHive - Clean
  • URLhaus - Clean
  • URLQuery - Unrated
  • Viettel Threat Intelligence - Clean
  • VIPRE - Unrated
  • ViriBack - Clean
  • VX Vault - Clean
  • Webroot - Clean
  • Xcitium Verdict Cloud - Clean
  • Yandex Safebrowsing - Clean
  • ZeroCERT - Clean
  • ZeroFox - Unrated

How security vendors categorise this site

  • Forcepoint ThreatSeekernewly registered websites

Each vendor’s own label for the site, saved with the antivirus result. Labels are separate from the engine verdicts above and can disagree with each other.

Security Scans

Browser Threat Feed
Not flagged on major threat lists

Checked against the browser threat feeds available to this scan — no hit.

What we observed

Visual analysis

Visual context from the captured page

Dark textured hero banner with large distressed 'THRIFTEEZ' lettering behind a white chunky sneaker, subtitle 'ALL BRANDED SHOES' and a globe icon reading 'Visit our website WWW.THRIFTEEZ.STORE'. Top announcement bar 'WELCOME TO THE THRIFTEEZ' with nav items HOME, SHOES, BESTSELLER and search/account/cart icons. Below the hero, a 'SHOES' section with a 'View all' link and a row of product tiles marked with yellow 'Sale' badges showing sneakers. No visible business name, address, phone number, payment badges or trust seals anywhere in the rendered viewport.

Context only

What the captured page showed

4 observations
  1. 01

    Dark textured hero banner with large distressed 'THRIFTEEZ' lettering behind a white chunky sneaker, subtitle 'ALL BRANDED SHOES' and a globe icon reading 'Visit our website WWW.THRIFTEEZ.STORE'.

  2. 02

    Top announcement bar 'WELCOME TO THE THRIFTEEZ' with nav items HOME, SHOES, BESTSELLER and search/account/cart icons.

  3. 03

    Below the hero, a 'SHOES' section with a 'View all' link and a row of product tiles marked with yellow 'Sale' badges showing sneakers.

  4. 04

    No visible business name, address, phone number, payment badges or trust seals anywhere in the rendered viewport.

What the page says about itself

Quoted from the pages we read: the site's own words, not our findings.

Page title
Thrifteez.Store

Pages we read

  • Main page/Read
  • Refund / returns policy/policies/refund-policyRead
  • Shipping policy/policies/shipping-policyRead

03 · Investigation Story

Investigation story

  1. What the site claims

    Thrifteez.Store

  2. What we observed

    The page content was captured and checked alongside 57 antivirus results.

  3. What independent research found

    The search completed without a material external warning or corroborating report.

  4. What remains unverified

    The checks completed, but ownership, business claims, and future site behavior can still change after this snapshot.

What kind of site and risk is this?

Threat category

Fake Shop & Commercial Deception

Service and business model

Shop

Transaction

Observed behavior

No disruptive browser behavior saved

Evidence behind this classification

  1. 01The store's contact address is a free-mail inbox (gmail.com) rather than a mailbox on its own domain.
  2. 02No contact email uses the site's own domain.
  3. 03The only published contact is a free Gmail inbox, not a mailbox on the store's own domain.

Web research findings

Independent findings for thrifteez.store, including public complaints, named review sources, registration records, and look-alike-domain evidence.

Not checked
Not run for this report
Company-registry lookup, site-clone comparison and look-alike domain comparison.
Web mentions
No scam reports found
The completed search returned no sourced scam reports or complaints.

No independently sourced scam reports or credibility records were found for thrifteez.store. That is common for new or low-traffic sites and does not clear the site.

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing
Not listedCheck ↗
VirusTotal
Not listedCheck ↗
AbuseIPDB
Not listedCheck ↗

04 · Domain & Infrastructure

Domain & infrastructure

Timeline · identity · encryption · redirects · hosting

The plumbing behind the site — who registered it, how it’s encrypted, where it’s hosted, and where it links out. A valid certificate or a calm server doesn’t mean the business is honest — scam sites pass these checks too.

Infrastructure map

  1. Domainthrifteez.store
  2. Redirects tothrifteez.store
  3. Hosted byShopify, Inc.
  4. Referencescdn.shopify.com · monorail-edge.shopifysvc.com

Domain Timeline

  1. Nov 1, 2026
    Domain registered

    First appeared in WHOIS records — 3 days old when this review was saved.

  2. Nov 4, 2026
    Saved security review — Rated Moderate Risk

    The evidence in this saved scan is mixed or incomplete; the completed checks are detailed above.

thrifteez.store was registered very recently when this review was saved. Freshly-registered domains are disproportionately used for scams, so a young domain whose evidence is mixed or incomplete warrants extra caution.

Contact Verification

Saved contact details can help identify the operator. Their presence supports traceability; it does not prove the business is trustworthy.

What We Found
Has contact info, but not on the site's domain
Emails on site's domainNone
Free-mail addressesthrifteezstore1@gmail.com
Phone numbersNone
Postal addressNot listed
Linked social profiles0
Signal Summary
Several contact red flags
  • No contact email uses the site's own domain.
  • Business contact uses a free-mail provider (gmail.com).
  • No phone number listed on the captured page.
  • No operator postal address visible on the captured page.

Domain & Encryption

Domain History
Age3 days old
RegistrarTucows Domains Inc.
Registrar IANA ID69
RegisteredNov 1, 2026
ExpiresNov 1, 2027
Last updatedNov 1, 2026 (3 days before this scan)
RegistrantNot published (privacy or GDPR redaction)
Owner privacyUnknown (owner not published)
Nameserversns-cloud-b1.googledomains.comns-cloud-b2.googledomains.comns-cloud-b3.googledomains.comns-cloud-b4.googledomains.comDNS by Google Cloud DNS
Registrar abuse contactdomainabuse@tucows.com · +49.2283296859
Verified ownerNo owner has verified this domain on MalwareTips
Encryption Certificate
StatusValid
ProtocolTLSv1.3
IssuerLet's Encrypt · YE1
IssuedNov 1, 2026 (3 days before this scan)

A certificate issued weeks or days before the scan on a domain registered recently is common on short-lived sites, though new legitimate sites look the same.

ExpiresJan 30, 2027 (86d)
Self-signedNo
Trusted chainYes: our check verified the issuer chain
Matches hostnameYes

Certificate issued for thrifteez.store.

Hosting & Technology
HostingShopify, Inc.
Server IP23.227.38.36 · shared CDN edge

A shared content-delivery network address answers for many sites, so it is not the site's own server and says nothing about who runs it.

Server locationCanada (CA)
Platform / CMSShopify
PopularityNot in the Cloudflare Radar top list
Technologies and payments

Payment providers the page loads

None seen among the outside domains we saved.

Read from the first 20 outside domains the page loads and the shop platform it uses; the web server and platform rows are under Hosting & Technology. A payment script on the page does not prove the shop accepts that method at checkout, or that you are protected.

Redirect Chain

Hops
1
Cross-domain
No
Lookalike
No
Punycode
No

The site refused our redirect check, so the chain below is the one our page reader followed.

  • 1301http://thrifteez.store/
  • 2200https://thrifteez.store/

Server Reputation

Abuse Intelligence
Confidence score0%
Reports on file1
ISPShopify, Inc.
Usage typeContent Delivery Network

Referenced Domains

Outbound domains this page links to or loads resources from. Each links to its own security scan.

05 · Evidence Ledger

Evidence ledger

  1. Antiviruscomplete
  2. Browser threat feedcomplete
  3. Page contentcomplete
  4. Analysiscomplete
  5. Visual evidencecomplete
Completed analysis

The conclusion is supported by the evidence saved with this report.

Technical threat

unknown

Malware, phishing, credential theft and hostile infrastructure.

No confirmed evidence in this dimension.

Operator / customer risk

suspicious

Complaints, withdrawals, business conduct and commercial traps.

The store's contact address is a free-mail inbox (gmail.com) rather than a mailbox on its own domain. · No operator name, phone number or postal address appears on the captured pages.

Source coverage and freshness

Status shows whether usable evidence was saved; finding shows what that evidence observed.

Antivirus
Result0 of 93 engines flagged
CompletionCompletedFindingNo adverse finding
Freshnessfresh · analysed Nov 4, 2026
Browser protection
ResultNo browser threat-list match
CompletionCompletedFindingNo adverse finding
Freshnessthis scan · Nov 4, 2026
Page content
ResultPage fetched · HTTP 200
CompletionCompletedFindingNo adverse finding
Freshnessthis scan · Nov 4, 2026
Visual evidence
Result4 visible observations saved with the page capture
CompletionCompletedFindingNo adverse finding
Freshnessthis scan · Nov 4, 2026
Independent research
ResultThe search completed without a material external finding
CompletionCompletedFindingNo adverse finding
Freshnessthis scan · Nov 4, 2026

06 · Your Next Move

Your next move

Proceed with caution

The evidence is mixed or incomplete, so treat this site as unverified until you can confirm who runs it.

  1. Analyst recommendation

    Treat this as an unproven shop rather than a safe one. If you want the shoes, pay with a method that can be reversed, keep the order confirmation, and test the seller with a small order first — the three-day return window and a Gmail-only contact give you little recourse if the goods never arrive or turn out not to be genuine. Buying branded footwear from a seller who publishes no name, address or phone number is a gamble on a shop that is only days old.

  2. Treat thrifteez.store as unverified

    Do not enter credentials or send money until you have independently verified the business.

  3. Verify the business through independent channels

    Check the company's social profiles, registry records, and search for recent news or reviews that are not hosted on the site itself.

  4. Never use irreversible payment methods

    Crypto, gift cards, wire transfers, and cash apps offer zero buyer protection. Use a credit card or PayPal if you must pay.

  5. Share your experience

    If you have additional context, drop a comment below or post on the MalwareTips forum.

    Open

Safer Alternatives

Trying to shop safely? Use a safe option instead

Shopping for a deal? Stick to established retailers with real buyer protection — if a price looks too good to be true on an unknown store, it usually is.

  1. Amazon

    A-to-z Guarantee covers eligible orders.

  2. eBay

    Money Back Guarantee on most purchases.

  3. Walmart

    Major retailer with established returns.

  4. The brand's official site

    Search the brand name + "official site" rather than trusting an ad or unknown store.

Suggestions for safety only — not endorsements. Always verify the address bar before signing in or paying, even on well-known sites.

07 · Safety FAQ

Safety FAQ

Answered from the saved verdict and evidence in this report.

Is thrifteez.store a scam or is it safe?
There isn't enough evidence yet for us to give thrifteez.store a confident verdict, so treat it with caution. The domain is 3 days old — recently-registered sites carry more risk. Until it can be independently verified, don't enter passwords, card details, or send money, and confirm the company through channels you find yourself rather than links on the site.
Is thrifteez.store safe to use?
thrifteez.store has a Safety Score of 52/100 (Moderate Risk). Analysis coverage is complete at 100%. Do not trust blindly; the evidence is inconclusive.
Has thrifteez.store been flagged by antivirus engines?
No — all 57 antivirus and blocklist engines in our malware network that rated it report thrifteez.store as clean. 36 other engines had no rating for it. That's a good sign, though antivirus coverage is only one of the many signals we weigh, and brand-new scam sites can appear clean before vendors catch up.
Is thrifteez.store on any phishing or malware blacklists?
No — thrifteez.store is not currently on the major browser blocklist feeds that Chrome, Safari, Firefox, and Edge rely on. Note that blocklists can lag behind brand-new scam domains, so "not listed" is reassuring but not a guarantee on its own.
How old is the thrifteez.store domain?
thrifteez.store is 3 days old, registered on November 1, 2026 through Tucows Domains Inc. Scam sites are very often freshly registered and short-lived, so an age under six months is a reason for extra caution.
Does thrifteez.store have a valid SSL certificate?
Yes — thrifteez.store presents a valid TLSv1.3 certificate issued by Let's Encrypt · YE1, valid for another 86 days. A certificate only encrypts the connection; it does not show who runs the site.
Where is thrifteez.store hosted?
thrifteez.store resolves to an IP operated by Shopify, Inc. in CA (Content Delivery Network). Hosting location alone doesn't make a site good or bad — but hosting that doesn't match a brand's claimed country, or that sits on networks known for abuse, is one of the many signals we weigh alongside the verdict above.
How often is the thrifteez.store report updated?
This report is a record of the scan run on November 4, 2026, and the verdict reflects that point in time. Scam sites change fast — they can go live, get flagged, or vanish within days — so if you believe something about thrifteez.store has changed, MalwareTips staff can run a fresh scan that re-checks every signal from scratch and republishes an updated verdict.

08 · Final Verdict

Final verdict

The saved conclusion, decisive evidence, and practical action in one final view.
Verdict score
52/100
Moderate Risk

Three-day-old Shopify shoe store with no named owner, no address, no phone and only a Gmail inbox for contact

Saved capturethrifteez.storeCapture-safe
Captured during this scan. Opening this report does not revisit the site.
Conclusion

thrifteez.store is a Shopify storefront selling 'branded' sneakers (361, Adidas, New Balance) in Pakistani rupees, with sale prices around Rs.2,250–2,850. Nothing technical is wrong with it — no malware or phishing detections, a valid encrypted connection and no Safe Browsing warning — but the shop itself gives a buyer almost nothing to check: the domain was three days old at review, no operator name, company registration, postal address or phone number appears on the pages, and the only contact route is a free Gmail inbox. That combination of a brand-new shop, undisclosed seller and unverifiable branded goods puts it in the moderate-risk band rather than the safe one.

Recommended actionTreat this as an unproven shop rather than a safe one. If you want the shoes, pay with a method that can be reversed, keep the order confirmation, and test the seller with a small order first — the three-day return window and a Gmail-only contact give you little recourse if the goods never arrive or turn out not to be genuine. Buying branded footwear from a seller who publishes no name, address or phone number is a gamble on a shop that is only days old.
Saved evidence only

Missing checks are never treated as a clean result.

Scan another URL
Continue toCommunity

09 · Community

Community

Are you the owner of thrifteez.store?Verify and reply