MalwareTipsTools

Bought from toyfoundryus.com? Rate it and warn othersBought here? Warn othersRate it · review · follow updates

Rate toyfoundryus.com

One tap is enough. Reviews are moderated and never change our Safety Score.

Is toyfoundryus.com safe?

http://toyfoundryus.com/

Moderate RiskStatus
Community ratingNo reviews yet · Write oneCommunity reviews are separate from our Safety Score.

Checked on

How we checked

Coverage: partial · 5 of 6 applicable core capabilities

  • Antivirus · not available: did not fully complete
  • Google Safe Browsing: completed
  • page reading: completed
  • page capture: completed
  • domain records: completed
  • web research: completed
Verdict

Nine-day-old toy storefront with a US address, no phone number and a single service@ mailbox

ToyFoundryUs is a WooCommerce shop selling toys, board games, figures and card supplies, with same-site Shop, cart and checkout links and a newsletter signup. The domain was registered only nine days before our review, yet the site presents a Pleasanton, California address and a 2026 copyright footer while disclosing no legal operator name or registration. Its only contact route is service@toyfoundryus.com with no phone number, and the landing page was served over plain HTTP. Nothing malicious was detected, but the operator side is unproven, so the score sits in the moderate band rather than Safe.

If you want to buy here, treat it as an unproven new shop: confirm the address bar shows HTTPS before entering any details, pay by card or a payment method with chargeback rights rather than bank transfer or gift cards, and keep the order confirmation and the 14-day refund notification window in mind. Given the nine-day-old domain, the missing phone number and the undisclosed operator, spending a small amount first is wiser than a large order.

Tell us the verdict looks wrong

toyfoundryus.com · Staff read every report. Your message is never published, and feedback never changes the score automatically.

What looks wrong?

Share this report

toyfoundryus.com: Moderate Risk — MalwareTips website safety report

Calibrated safety spectrum

Where this site sits

  1. Dangerous1–20
  2. High Risk21–44
  3. Moderate Risk45–69
  4. Low Risk70–84
  5. Safe85–100

The score combines saved evidence strength and analysis quality. Coverage is reported separately.

Score explained

Why 52/100

Moderate Risk covers scores 45–69. 3 findings pulled the score down; 3 pushed it up.

What pulled the score down

  1. ModerateThe store gives a generic service@ mailbox as its contact, a pattern repeated across fake-shop networks.-18 pts
  2. ModerateThe registrable domain is only nine days old while the site describes itself as a settled US retailer with a California address and a 2026 copyright footer.-16 pts
  3. MinorThe only contact route is a generic service@ mailbox on the site's own domain, with no phone number listed and no legal operator named.

What pushed the score up

  • SupportsThe store publishes terms, a shipping policy and a refund page with a 30-day policy and a 14-day notification window via its service mailbox.
  • SupportsA postal address is displayed and the contact email sits on the site's own domain rather than a free-mail provider.
  • SupportsSafe Browsing returned no threat warning, the hosting IP has an abuse score of 0/100 across zero reports, and no popups, redirects or downloads were observed.

Points come from the saved evidence ledger: it lowered the score from 86 to 52 and split those 34 points between the findings that show points; the others carry no points in the ledger.

01 · Investigation Brief

Investigation Brief

ToyFoundryUs is a WooCommerce shop selling toys, board games, figures and card supplies, with same-site Shop, cart and checkout links and a newsletter signup. The domain was registered only nine days before our review, yet the site presents a Pleasanton, California address and a 2026 copyright footer while disclosing no legal operator name or registration. Its only contact route is service@toyfoundryus.com with no phone number, and the landing page was served over plain HTTP. Nothing malicious was detected, but the operator side is unproven, so the score sits in the moderate band rather than Safe.

A brand-new domain wearing an established-retailer look

The registrable domain is nine days old at the time of review, while the storefront displays a full US postal address at 1500 Stoneridge Mall Road, Pleasanton, California 94588 and a copyright line dated 2026. A store that has just been registered can still be legitimate, but the gap between a days-old domain and the presentation of a settled retail business is the main reason this site cannot be treated as established.

No legal operator name, company registration or ownership disclosure appears on the captured pages, and the only contact channel is a generic service@ mailbox on the site's own domain, with no phone number listed. A domain-matched email and a printed address are better than a free-mail contact, but a single shared mailbox with no phone and no named company leaves no way to verify who is actually behind the shop.

Independent web research returned nothing usable about this specific domain, so the operator's public reputation is unverified. That is an absence of information, not a finding of complaints.

Clean technical checks, but the landing page was unencrypted

The browser threat feed returned no threat warning for the host, the hosting IP carries an abuse confidence score of 0/100 across zero saved reports, and a valid trusted TLS certificate exists for the host. No popups, forced redirects, notification prompts or file downloads were observed during rendering, and no ad-network or affiliate hosts were contacted.

The scanned address was nevertheless served over plain HTTP with no redirect to HTTPS, so the page itself arrived unencrypted even though a certificate is available. That is a real weakness for anything typed into the site, and it is worth checking that the address bar shows HTTPS before entering account or payment details.

On the policy side the store does publish terms, a shipping policy and a refund page stating a 30-day hassle-free policy with a 14-day notification window through its service mailbox, and it advertises free shipping over $40. These are the kind of disclosures a real shop makes, and they weigh against the harshest reading of the evidence.

What a shopper actually does here

The homepage navigation offers Home, Shop, Board Games, Figures and Cards Supplies, and the commerce buttons — Shop, View cart and Checkout — all point to pages on toyfoundryus.com itself. No cross-domain order hand-off or third-party merchant link was captured, so the purchase path stays on the same site.

A newsletter form on the homepage and in the terms-page footer asks for an email address, and the header shows a search field, an account icon and a cart icon. In the captured screenshot the main content area below the header rendered blank, with no product grid or banners, which is consistent with a storefront that is still being built out rather than one with a long trading history.

Why the score is 52

The store gives a generic service@ mailbox as its contact, a pattern repeated across fake-shop networks.

02 · Security Evidence

Security evidence

Security Scans

Browser Threat Feed
Not flagged on major threat lists

Checked against the browser threat feeds available to this scan — no hit.

What we observed

Visual analysis

Visual context from the captured page

Top bar shows a 'Search for items...' search field, an 'Account' icon and a 'Cart' icon with a '0' badge. Horizontal navigation reads Home, Shop, Board Games, Figures, Cards Supplies. Green text at upper right reads 'service@toyfoundryus.com' with '24/7 Support Center' beneath it. The main content area below the header is entirely blank white — no product grid, banners or footer content rendered.

Context only

What the captured page showed

4 observations
  1. 01

    Top bar shows a 'Search for items...' search field, an 'Account' icon and a 'Cart' icon with a '0' badge.

  2. 02

    Horizontal navigation reads Home, Shop, Board Games, Figures, Cards Supplies.

  3. 03

    Green text at upper right reads 'service@toyfoundryus.com' with '24/7 Support Center' beneath it.

  4. 04

    The main content area below the header is entirely blank white — no product grid, banners or footer content rendered.

What the page says about itself

Quoted from the pages we read: the site's own words, not our findings.

Page title
ToyFoundryUs – Fun and Games for Creative Minds

Pages we read

  • Main page/Read
  • Terms/terms-conditions/Read
  • Refund / returns policy/refund-returns-policy/Read
  • Shipping policy/shipping-policy/Read
  • Contact page/page-contact.htmlCould not be read

03 · Investigation Story

Investigation story

  1. What the site claims

    ToyFoundryUs – Fun and Games for Creative Minds

  2. What we observed

    The page content was captured and checked; the antivirus check returned no result for this scan.

  3. What independent research found

    The search completed without a material external warning or corroborating report.

  4. What remains unverified

    1 of the 6 applicable core capabilities did not complete, so those gaps remain visible in the coverage ledger.

What kind of site and risk is this?

Threat category

Fake Shop & Commercial Deception

Service and business model

Shop

Transaction

Observed behavior

No disruptive browser behavior saved

Evidence behind this classification

  1. 01The registrable domain is only nine days old while the site describes itself as a settled US retailer with a California address and a 2026 copyright footer.
  2. 02The store gives a generic service@ mailbox as its contact, a pattern repeated across fake-shop networks.
  3. 03The only contact route is a generic service@ mailbox on the site's own domain, with no phone number listed and no legal operator named.

Web research findings

Independent findings for toyfoundryus.com, including public complaints, named review sources, registration records, and look-alike-domain evidence.

Not checked
Not run for this report
Company-registry lookup, site-clone comparison and look-alike domain comparison.
Web mentions
No scam reports found
The completed search returned no sourced scam reports or complaints.

No independently sourced scam reports or credibility records were found for toyfoundryus.com. That is common for new or low-traffic sites and does not clear the site.

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing
Not listedCheck ↗
AbuseIPDB
Not listedCheck ↗

04 · Domain & Infrastructure

Domain & infrastructure

Timeline · identity · encryption · redirects · hosting

The plumbing behind the site — who registered it, how it’s encrypted, where it’s hosted, and where it links out. A valid certificate or a calm server doesn’t mean the business is honest — scam sites pass these checks too.

Infrastructure map

  1. Domaintoyfoundryus.com
  2. Redirects towww.toyfoundryus.com
  3. Hosted byCloudflare, Inc.
  4. Referencesworstore.org · static.cloudflareinsights.com

Domain Timeline

  1. Oct 28, 2026
    Domain registered

    First appeared in WHOIS records — 9 days old when this review was saved.

  2. Nov 7, 2026
    Saved security review — Rated Moderate Risk

    The evidence in this saved scan is mixed or incomplete; the completed checks are detailed above.

toyfoundryus.com was registered very recently when this review was saved. Freshly-registered domains are disproportionately used for scams, so a young domain whose evidence is mixed or incomplete warrants extra caution.

Contact Verification

Saved contact details can help identify the operator. Their presence supports traceability; it does not prove the business is trustworthy.

What We Found
Has a contact email on its own domain
Emails on site's domainservice@toyfoundryus.com
Phone numbersNone
Postal addressPresent
Linked social profiles0
Signal Summary
One contact red flag
  • No phone number listed on the captured page.
  • Contact email on the site's own domain (service@toyfoundryus.com).
  • Postal address visible on the page.

Domain & Encryption

Domain History
Age9 days old
RegistrarGransy, s.r.o.
Registrar IANA ID1505
RegisteredOct 28, 2026
ExpiresOct 28, 2027
Last updatedOct 28, 2026 (9 days before this scan)
RegistrantNot published (privacy or GDPR redaction)
Owner privacyUnknown (owner not published)
Nameserverschristina.ns.cloudflare.comlangston.ns.cloudflare.comDNS by Cloudflare

Cloudflare DNS is used by legitimate and scam sites alike, so it does not identify who runs the site.

Registrar abuse contactabuse@regtons.com · +420.734 463 373
Verified ownerNo owner has verified this domain on MalwareTips
Encryption Certificate
StatusValid
ProtocolTLSv1.3
IssuerLet's Encrypt · YE2
IssuedOct 28, 2026 (9 days before this scan)

A certificate issued weeks or days before the scan on a domain registered recently is common on short-lived sites, though new legitimate sites look the same.

ExpiresJan 26, 2027 (80d)
Self-signedNo
Trusted chainYes: our check verified the issuer chain
Matches hostnameYes

Certificate issued for toyfoundryus.com.

Hosting & Technology
HostingCloudflare, Inc.
Server IP172.67.152.30 · shared Cloudflare edge

A shared Cloudflare address answers for many sites, so it is not the site's own server and says nothing about who runs it.

Server locationUnited States (US)
Web servercloudflare
Platform / CMSWordPress
PopularityNot in the Cloudflare Radar top list
Technologies and payments

Analytics and ads

  • Cloudflare Web Analytics

Payment providers the page loads

None seen among the outside domains we saved.

Read from the first 20 outside domains the page loads and the shop platform it uses; the web server and platform rows are under Hosting & Technology. A payment script on the page does not prove the shop accepts that method at checkout, or that you are protected.

Redirect Chain

Hops
1
Cross-domain
No
Lookalike
No
Punycode
No
  • 1301http://toyfoundryus.com/
  • 2200http://www.toyfoundryus.com/

Server Reputation

Abuse Intelligence
Confidence score0%
Reports on file0
ISPCloudflare, Inc.
Usage typeContent Delivery Network

Referenced Domains

Outbound domains this page links to or loads resources from. Each links to its own security scan.

05 · Evidence Ledger

Evidence ledger

  1. Antivirusunavailable
  2. Browser threat feedcomplete
  3. Page contentcomplete
  4. Analysiscomplete
  5. Visual evidencecomplete
Completed analysis

The conclusion is supported by the evidence saved with this report.

Technical threat

unknown

Malware, phishing, credential theft and hostile infrastructure.

No confirmed evidence in this dimension.

Operator / customer risk

suspicious

Complaints, withdrawals, business conduct and commercial traps.

The store gives a generic service@ mailbox as its contact, a pattern repeated across fake-shop networks. · The registrable domain is only nine days old while the site describes itself as a settled US retailer with a California address and a 2026 copyright footer.

Source coverage and freshness

Status shows whether usable evidence was saved; finding shows what that evidence observed.

Antivirus
ResultNo usable engine result was saved
CompletionUnavailableFindingNo saved finding
FreshnessNot available
Browser protection
ResultNo browser threat-list match
CompletionCompletedFindingNo adverse finding
Freshnessthis scan · Nov 7, 2026
Page content
ResultPage fetched · HTTP 200
CompletionCompletedFindingNo adverse finding
Freshnessthis scan · Nov 7, 2026
Visual evidence
Result4 visible observations saved with the page capture
CompletionCompletedFindingNo adverse finding
Freshnessthis scan · Nov 7, 2026
Independent research
ResultThe search completed without a material external finding
CompletionCompletedFindingNo adverse finding
Freshnessthis scan · Nov 7, 2026

06 · Your Next Move

Your next move

Proceed with caution

The evidence is mixed or incomplete, so treat this site as unverified until you can confirm who runs it.

  1. Analyst recommendation

    If you want to buy here, treat it as an unproven new shop: confirm the address bar shows HTTPS before entering any details, pay by card or a payment method with chargeback rights rather than bank transfer or gift cards, and keep the order confirmation and the 14-day refund notification window in mind. Given the nine-day-old domain, the missing phone number and the undisclosed operator, spending a small amount first is wiser than a large order.

  2. Treat toyfoundryus.com as unverified

    Do not enter credentials or send money until you have independently verified the business.

  3. Verify the business through independent channels

    Check the company's social profiles, registry records, and search for recent news or reviews that are not hosted on the site itself.

  4. Never use irreversible payment methods

    Crypto, gift cards, wire transfers, and cash apps offer zero buyer protection. Use a credit card or PayPal if you must pay.

  5. Share your experience

    If you have additional context, drop a comment below or post on the MalwareTips forum.

    Open

Safer Alternatives

Trying to shop safely? Use a safe option instead

Shopping for a deal? Stick to established retailers with real buyer protection — if a price looks too good to be true on an unknown store, it usually is.

  1. Amazon

    A-to-z Guarantee covers eligible orders.

  2. eBay

    Money Back Guarantee on most purchases.

  3. Walmart

    Major retailer with established returns.

  4. The brand's official site

    Search the brand name + "official site" rather than trusting an ad or unknown store.

Suggestions for safety only — not endorsements. Always verify the address bar before signing in or paying, even on well-known sites.

07 · Safety FAQ

Safety FAQ

Answered from the saved verdict and evidence in this report.

Is toyfoundryus.com a scam or is it safe?
There isn't enough evidence yet for us to give toyfoundryus.com a confident verdict, so treat it with caution. The domain is 9 days old — recently-registered sites carry more risk. Until it can be independently verified, don't enter passwords, card details, or send money, and confirm the company through channels you find yourself rather than links on the site.
Is toyfoundryus.com safe to use?
toyfoundryus.com has a Safety Score of 52/100 (Moderate Risk). Analysis coverage is partial at 73%. Do not trust blindly; analysis may be limited.
Is toyfoundryus.com on any phishing or malware blacklists?
No — toyfoundryus.com is not currently on the major browser blocklist feeds that Chrome, Safari, Firefox, and Edge rely on. Note that blocklists can lag behind brand-new scam domains, so "not listed" is reassuring but not a guarantee on its own.
How old is the toyfoundryus.com domain?
toyfoundryus.com is 9 days old, registered on October 28, 2026 through Gransy, s.r.o. Scam sites are very often freshly registered and short-lived, so an age under six months is a reason for extra caution.
Does toyfoundryus.com have a valid SSL certificate?
Yes — toyfoundryus.com presents a valid TLSv1.3 certificate issued by Let's Encrypt · YE2, valid for another 80 days. But the address we scanned was served over plain HTTP with no redirect to HTTPS, so that connection was not encrypted: do not type passwords or payment details into it. A certificate only encrypts the connection; it does not show who runs the site.
Where is toyfoundryus.com hosted?
toyfoundryus.com resolves to an IP operated by Cloudflare, Inc. in US (Content Delivery Network). Hosting location alone doesn't make a site good or bad — but hosting that doesn't match a brand's claimed country, or that sits on networks known for abuse, is one of the many signals we weigh alongside the verdict above.
How often is the toyfoundryus.com report updated?
This report is a record of the scan run on November 7, 2026, and the verdict reflects that point in time. Scam sites change fast — they can go live, get flagged, or vanish within days — so if you believe something about toyfoundryus.com has changed, MalwareTips staff can run a fresh scan that re-checks every signal from scratch and republishes an updated verdict.

08 · Final Verdict

Final verdict

The saved conclusion, decisive evidence, and practical action in one final view.
Verdict score
52/100
Moderate Risk

Nine-day-old toy storefront with a US address, no phone number and a single service@ mailbox

Saved capturetoyfoundryus.comCapture-safe
Captured during this scan. Opening this report does not revisit the site.
Conclusion

ToyFoundryUs is a WooCommerce shop selling toys, board games, figures and card supplies, with same-site Shop, cart and checkout links and a newsletter signup. The domain was registered only nine days before our review, yet the site presents a Pleasanton, California address and a 2026 copyright footer while disclosing no legal operator name or registration. Its only contact route is service@toyfoundryus.com with no phone number, and the landing page was served over plain HTTP. Nothing malicious was detected, but the operator side is unproven, so the score sits in the moderate band rather than Safe.

Recommended actionIf you want to buy here, treat it as an unproven new shop: confirm the address bar shows HTTPS before entering any details, pay by card or a payment method with chargeback rights rather than bank transfer or gift cards, and keep the order confirmation and the 14-day refund notification window in mind. Given the nine-day-old domain, the missing phone number and the undisclosed operator, spending a small amount first is wiser than a large order.
Saved evidence only

Missing checks are never treated as a clean result.

Scan another URL
Continue toCommunity

09 · Community

Community

Are you the owner of toyfoundryus.com?Verify and reply