Is thriftellc.in safe?
http://thriftellc.in/
Coveragecomplete4 of 4 applicable core capabilities
Thriftellc is a small Shopify thrift-fashion store with a free-mail contact and two vendor 'suspicious' flags, but no confirmed fraud mechanism.
Thriftellc presents itself as an independent reseller of thrifted and surplus fashion, running on Shopify with product pages, a cart and a discount code. The technical picture is mostly clean: the browser threat feed returned no warning and the saved TLS check found a valid encrypted connection, but two antivirus engines marked the URL as suspicious. The operator's contact setup is weak for a store that takes orders: business email is a free Gmail inbox rather than a mailbox on its own domain, and the captured page did not show a postal address even though a phone number and social profiles are listed. Nothing in the evidence shows a fake-shop kit, a cloned brand storefront, a refund trap or a cross-domain order path, so this is a moderate-risk verdict rather than a confirmed scam.
Be the first to review thriftellc.in
Lost money to thriftellc.in? Warn others
Did you buy from thriftellc.in?
Loading saved screenshot
Preparing the saved page preview.
Follow thriftellc.in
Get a notification in your MalwareTips bell when new reviews arrive (one digest a day at most), when the verdict changes after a rescan, and when MalwareTips or the verified site owner replies. Unfollow any time.
Where this site sits
- Dangerous1–20
- High Risk21–44
- Moderate Risk45–69
- Low Risk70–84
- Safe85–100
The score combines saved evidence strength and analysis quality. Coverage is reported separately.
01 · Investigation Brief
Investigation Brief
Thriftellc presents itself as an independent reseller of thrifted and surplus fashion, running on Shopify with product pages, a cart and a discount code. The technical picture is mostly clean: the browser threat feed returned no warning and the saved TLS check found a valid encrypted connection, but two antivirus engines marked the URL as suspicious. The operator's contact setup is weak for a store that takes orders: business email is a free Gmail inbox rather than a mailbox on its own domain, and the captured page did not show a postal address even though a phone number and social profiles are listed. Nothing in the evidence shows a fake-shop kit, a cloned brand storefront, a refund trap or a cross-domain order path, so this is a moderate-risk verdict rather than a confirmed scam.
Clean browsing checks, but two vendors flag the URL
The saved checks show no active malware or phishing warning: the browser threat feed returned no threat warning and the TLS check found a valid encrypted connection. That means the page was not serving a known malicious payload at scan time, not that the shop is trustworthy.
Against that, two antivirus engines flagged the URL as suspicious, with zero malicious and two suspicious detections across 93 engines. The vendors named are alphaMountain.ai and Gridinsoft, and the nature of those flags is not explained beyond a general suspicious/spam categorisation, so they are a caution rather than proof of a specific attack.
A real-looking storefront with thin operator disclosure
The site describes itself as an independent reseller of original, legally sourced thrifted and surplus fashion, and states it is not affiliated with or endorsed by any brand. That is a normal disclaimer for a reseller and does not by itself indicate deception.
The contact setup is the weakest part of the picture. Business communication runs through a free Gmail inbox, ellcstudio1@gmail.com, rather than an address on the store's own domain, and the captured page did not show an operator postal address. A phone number and links to five social profiles are listed, which gives some reachability, but a free-mail-only contact for a store that takes orders is a meaningful accountability gap.
The domain is 450 days old, so it is not a brand-new registration, and the store runs on Shopify with standard cart and checkout elements. Those are ordinary commercial signals, not evidence of fraud, but they also do not offset the contact and vendor-flag concerns.
Why the score is 62
2 antivirus results marked the URL as suspicious. Coverage remains separate so missing sources cannot be mistaken for clean results.
02 · Security Evidence
Security evidence
Antivirus Engines
2/ 93
detectionsFresh result
2 engines flagged this URL
Every saved adverse engine is listed below. The full provider matrix remains available for audit.
- Malicious
- 0
- Suspicious
- 2
- Total
- 93
| Engine | Finding |
|---|---|
| alphaMountain.aiSuspicious | spam |
| GridinsoftSuspicious | suspicious |
All 93 engine results
- alphaMountain.ai - spam - Suspicious
- Gridinsoft - Suspicious
- 0xSI_f33d - Unrated
- Abusix - Clean
- Acronis - Clean
- ADMINUSLabs - Clean
- AILabs (MONITORAPP) - Clean
- AlienVault - Clean
- AlphaSOC - Unrated
- Antiy-AVL - Clean
- ArcSight Threat Intelligence - Unrated
- AutoShun - Unrated
- Bfore.Ai PreCrime - Unrated
- BitDefender - Clean
- Bkav - Unrated
- BlockList - Clean
- Blueliv - Clean
- Certego - Clean
- ChainPatrol - Unrated
- Chong Lua Dao - Clean
- CINS Army - Clean
- CRDF - Clean
- Criminal IP - Unrated
- CSIS Security Group - Unrated
- CTX AI - Clean
- Cyan - Unrated
- Cyble - Clean
- CyRadar - Clean
- desenmascara.me - Clean
- DNS8 - Unrated
- Dr.Web - Clean
- EmergingThreats - Clean
- Emsisoft - Clean
- Ermes - Unrated
- ESET - Clean
- ESTsecurity - Clean
- Forcepoint ThreatSeeker - Unrated
- Fortinet - Clean
- Fortra - Unrated
- G-Data - Clean
- GCP Abuse Intelligence - Unrated
- Google Safe Browsing - Clean
- GreenSnow - Clean
- GreyNoise - Unrated
- Guardpot - Unrated
- Heimdal Security - Clean
- Hunt.io Intelligence - Unrated
- IPsum - Clean
- Juniper Networks - Clean
- K7AntiVirus - Unrated
- Kaspersky - Clean
- LevelBlue - Clean
- Lionic - Clean
- Lumu - Unrated
- Malwared - Clean
- MalwarePatrol - Clean
- MalwareURL - Unrated
- Mimecast - Unrated
- Netcraft - Unrated
- OpenPhish - Clean
- Orcapot - Unrated
- PhishFort - Unrated
- Phishing Database - Clean
- Phishtank - Clean
- PREBYTES - Clean
- PrecisionSec - Unrated
- Quick Heal - Clean
- Quttera - Clean
- Rising - Clean
- SafeToOpen - Unrated
- Sangfor - Clean
- Sansec eComscan - Unrated
- Scantitan - Clean
- SCUMWARE.org - Clean
- Seclookup - Clean
- Snort IP sample list - Unrated
- SOCRadar - Unrated
- Sophos - Clean
- StopForumSpam - Clean
- Sucuri SiteCheck - Clean
- Synthient - Unrated
- ThreatHive - Clean
- URLhaus - Clean
- URLQuery - Unrated
- Viettel Threat Intelligence - Clean
- VIPRE - Unrated
- ViriBack - Clean
- VX Vault - Clean
- Webroot - Clean
- Xcitium Verdict Cloud - Unrated
- Yandex Safebrowsing - Clean
- ZeroCERT - Clean
- ZeroFox - Unrated
Security Scans
Checked against the browser threat feeds available to this scan — no hit.
What we observed
Loading saved screenshot
Preparing the saved page preview.
Visual context from the captured page
GET 5% OFF ON YOUR PURCHASE USE CODE:-ELLC5
What the captured page showed
1 observation- 01
GET 5% OFF ON YOUR PURCHASE USE CODE:-ELLC5
03 · Investigation Story
Investigation story
What the site claims
Thriftellc
What we observed
The page content was captured and checked alongside 58 antivirus results.
What independent research found
The search completed without a material external warning or corroborating report.
What remains unverified
The checks completed, but ownership, business claims, and future site behavior can still change after this snapshot.
What kind of site and risk is this?
Threat category
No threat category confirmed
Service and business model
Shop
Observed behavior
Evidence behind this classification
- 01Two antivirus engines, alphaMountain.ai and Gridinsoft, marked the URL as suspicious.
- 02The store's contact address is a free-mail inbox (gmail.com) rather than a mailbox on its own domain.
- 032 antivirus results marked the URL as suspicious.
If this is a scam — what it means for you
What a visitor actually does here
A visitor browses the collection, clicks 'Shop Now' or 'Add to cart', and proceeds through the store's own cart to a purchase. The commercial flow stays on thriftellc.in; there is no cross-domain checkout or affiliate redirect in the captured links.
If this is a scam, how it works
The evidence-backed path
Each stage below is preserved from the grounded analysis and linked to saved evidence.
The only outbound commercial-adjacent links are to Instagram and to Shopify as the platform provider, both of which are normal for a small independent store and carry no monetisation or redirect risk in the evidence.
A discount code, ELLC5, is promoted on the storefront, which is a standard retail promotion rather than a deceptive mechanism. The practical exposure for a buyer is therefore the ordinary risk of paying an online store whose operator identity is only partially disclosed.
If you are considering a purchase, treat Thriftellc as an unverified small store rather than an established retailer. Prefer payment methods with buyer protection, avoid sending bank transfers or gift-card payments, and test the contact channels before ordering. The free-mail-only contact and the two vendor 'suspicious' flags are reasons for caution, not proof of fraud, but they are enough to justify checking before you pay.
Web research findings
Independent findings for thriftellc.in, including public complaints, named review sources, registration records, and look-alike-domain evidence. A missing result is shown as unverified, never converted into a clean bill of health.
No independently sourced scam reports or credibility records were found for thriftellc.in. That is common for new or low-traffic sites and does not clear the site.
Reputation Sources
How this domain rates across independent threat-intelligence and blocklist providers.
04 · Domain & Infrastructure
Domain & infrastructure
The plumbing behind the site — who registered it, how it’s encrypted, where it’s hosted, and where it links out. A valid certificate or a calm server doesn’t mean the business is honest — scam sites pass these checks too. Use this to corroborate the verdict, not to overturn it.
Infrastructure map
How the saved page connected to the wider web.
- Domainthriftellc.in
- Redirects tothriftellc.in
- Hosted byShopify, Inc.
- Referencesfonts.shopifycdn.com · cdn.shopify.com
Domain Timeline
- Jul 31, 2025Domain registered
First appeared in WHOIS records — 1.2 years old when this review was saved.
- Oct 24, 2026Saved security review — Rated Moderate Risk
The evidence in this saved scan is mixed or incomplete; the completed checks are detailed above.
Contact Verification
Saved contact details can help identify the operator. Their presence supports traceability; it does not prove the business is trustworthy.
- No contact email uses the site's own domain.
- Business contact uses a free-mail provider (gmail.com).
- No operator postal address visible on the captured page.
- Phone number listed (+91 820-9202139).
- Links to 5 social profiles.
Domain & Encryption
Redirect Chain
- 1301http://thriftellc.in/
- 2200https://thriftellc.in/
Server Reputation
Referenced Domains
Outbound domains this page links to or loads resources from. Each links to its own security scan.
05 · Evidence Ledger
Evidence ledger
- Antiviruscomplete
- Browser threat feedcomplete
- Page contentcomplete
- Analysiscomplete
- Visual evidencecomplete
The conclusion is supported by the evidence saved with this report.
Technical threat
suspiciousMalware, phishing, credential theft and hostile infrastructure.
2 antivirus results marked the URL as suspicious.
Operator / customer risk
suspiciousComplaints, withdrawals, business conduct and commercial traps.
The store's contact address is a free-mail inbox (gmail.com) rather than a mailbox on its own domain. · The captured page did not show an operator postal address.
Source coverage and freshness
Status shows whether usable evidence was saved; finding shows what that evidence observed.
| Source | Result | Completion | Finding | Freshness |
|---|---|---|---|---|
| Antivirus | 2 of 93 engines flagged | Completed | Adverse | fresh · analysed Oct 24, 2026 |
| Browser protection | No browser threat-list match | Completed | No adverse finding | this scan · Oct 24, 2026 |
| Page content | Page fetched · HTTP 200 | Completed | No adverse finding | this scan · Oct 24, 2026 |
| Visual evidence | 1 visible observation saved with the page capture | Completed | No adverse finding | this scan · Oct 24, 2026 |
| Independent research | The search completed without a material external finding | Completed | No adverse finding | this scan · Oct 24, 2026 |
- Antivirus
- Result2 of 93 engines flagged
- CompletionCompleted
- FindingAdverse
- Freshnessfresh · analysed Oct 24, 2026
- Browser protection
- ResultNo browser threat-list match
- CompletionCompleted
- FindingNo adverse finding
- Freshnessthis scan · Oct 24, 2026
- Page content
- ResultPage fetched · HTTP 200
- CompletionCompleted
- FindingNo adverse finding
- Freshnessthis scan · Oct 24, 2026
- Visual evidence
- Result1 visible observation saved with the page capture
- CompletionCompleted
- FindingNo adverse finding
- Freshnessthis scan · Oct 24, 2026
- Independent research
- ResultThe search completed without a material external finding
- CompletionCompleted
- FindingNo adverse finding
- Freshnessthis scan · Oct 24, 2026
07 · Safety FAQ
Safety FAQ
Common questions, answered directly from the scan data above — so the answers reflect the saved verdict and evidence in this report.
Is thriftellc.in a scam or is it safe?
Is thriftellc.in safe to use?
Has thriftellc.in been flagged by antivirus engines?
Is thriftellc.in on any phishing or malware blacklists?
How old is the thriftellc.in domain?
Does thriftellc.in have a valid SSL certificate?
Where is thriftellc.in hosted?
How often is the thriftellc.in report updated?
08 · Final Verdict
Final verdict
Thriftellc is a small Shopify thrift-fashion store with a free-mail contact and two vendor 'suspicious' flags, but no confirmed fraud mechanism.
Thriftellc presents itself as an independent reseller of thrifted and surplus fashion, running on Shopify with product pages, a cart and a discount code. The technical picture is mostly clean: the browser threat feed returned no warning and the saved TLS check found a valid encrypted connection, but two antivirus engines marked the URL as suspicious. The operator's contact setup is weak for a store that takes orders: business email is a free Gmail inbox rather than a mailbox on its own domain, and the captured page did not show a postal address even though a phone number and social profiles are listed. Nothing in the evidence shows a fake-shop kit, a cloned brand storefront, a refund trap or a cross-domain order path, so this is a moderate-risk verdict rather than a confirmed scam.
09 · Community
Community
Are you the owner of thriftellc.in?Verify and reply
