Is wastedfabrics.com safe?

A Shopify fabric shop with a normal same-site checkout

The store presents itself as a European reference for deadstock fabrics, with navigation for fabrics, a surprise box, gift cards and an FAQ, and a country selector set to the United States with prices in US dollars. The cart and 'Shop collection' buttons lead to the shop's own pages, and the footer credits Shopify, so ordering happens on the same domain rather than through a redirect to an unrelated payment site.

The only outbound links are to the shop's own Facebook, Instagram and TikTok profiles, Shopify's badge and the Belgian web agency that built the site. None of these is a monetised affiliate or presell path, and no cross-domain order or payment redirect appeared in the link graph.

The site also runs a newsletter signup offering a 10% instant discount for an email address, a job-application form, and terms stating that placing an order means agreeing to transactional and service-related electronic communications. These are ordinary marketing and consent mechanics, not a hidden subscription.

Complaints about orders, and little to identify the seller

Independent review pages returned in search include a customer saying that after 17 days one fabric in the order was missing, and another describing the store as dishonest and evasive when a legitimate concern was raised. A further review is positive, from a shopper who orders regularly and reports complete deliveries, so the picture is mixed rather than uniformly bad.

On the captured pages the shop publishes a domain-matched contact address and links to 18 social profiles, but no phone number and no operator postal address are visible, and no legal entity or registration number is disclosed. That makes it harder for a buyer to escalate a problem or establish who is actually behind the store.

A reputation scanner page also rates the domain's trust score as very low, and one saved antivirus observation marks the URL as suspicious. That antivirus result is a stale reputation flag rather than a malware detection, and the domain itself is roughly three and a half years old, which is consistent with an established storefront rather than a throwaway one.

No malware or phishing behaviour observed

The browser threat feed returned no threat warning, the saved TLS check found a valid encrypted connection, and the hosting IP carries an abuse confidence score of 0/100 across three saved reports. No popups, forced redirects, notification prompts or file downloads were observed, and the cookie panel offers reject-all alongside accept-all.

The saved antivirus observation that flags the URL as suspicious comes from a reputation-style scanner and is stale, so it should be read as a trust-model warning about the shop rather than evidence of malicious code on the page.