Is baahiye.so a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

Baahiye Digital Marketing is a Somalia-based digital agency website presenting branding, graphic design, web development, video production, portfolio work, testimonials, contact details, and packaged marketing services, with an apparent business model based on selling one-time creative and promotional services.

Scam/Impersonation Risk

The site’s content presents as a conventional marketing agency and the page-level review found no login form, credential-harvesting mechanism, brand-impersonation indicator, or other immediate phishing behavior. However, this benign presentation is outweighed by confirmed external reputation contradictions: multiple security detections classify the domain as malicious, the domain is listed on external blacklists, and a kill-switch condition was activated because of the volume of malicious detections. The available evidence does not establish that the site impersonates a named third party, but the blacklist and malicious-detection results create a material risk for sensitive interaction. Reports associated with a separate shared CDN IP were explicitly attributed to shared infrastructure, had zero confidence, and were whitelisted; that signal is therefore not treated as site-specific evidence. Evidence:

• The homepage presents agency services, portfolio items, testimonials, and package pricing, with no detected login or sensitive-input form.
• External scanning recorded 12 malicious detections and 1 suspicious detection, including a Tier-1 security-vendor detection.
• The domain is recorded as blacklisted by external sources; general browsing-safety results were not uniformly malicious.
• The shared-infrastructure report comprised 11 IP abuse reports attributed to a whitelisted CDN address with confidence score 0.

Regulatory Verification Notes

The site identifies itself as Baahiye Digital Marketing and describes a service business, but the available evidence does not independently verify the real-world operator. The on-site disclosure position is unclear, and no licensing claim, licensing authority, or registration number is supplied in the analysed content. For a creative-services agency, that absence is primarily a transparency and counterparty-verification gap rather than proof of fraud; nevertheless, the unresolved operator identity is significant when considered alongside the confirmed external blacklist. The site’s professional presentation, stable delivery, and valid transport encryption do not override that reputation finding. Evidence:

• The homepage title identifies “Baahiye Digital Marketing - Center of Marketing & Advertisement,” while the analysed content provides no verified legal-entity linkage.
• The domain registration record shows creation on 2025-04-22, with an age of 1.33 years.
• Archive records show 17 snapshots spanning 2020–2025, with 6 years tracked.
• The site is hosted on AS16509 (AMAZON-02 - Amazon.com, Inc., US); its TLS certificate is issued by YR1 at DV validation level and is valid to 2026-11-03.

What to Verify Next

Before any sensitive engagement, the proposed contracting entity should be confirmed through an independently obtained business registry record and through contact details sourced outside the website. Any service quotation should be matched to a written contract, identifiable counterparty, refund terms, and payment method offering appropriate dispute protections. Credentials, confidential business materials, and advance funds should not be provided until those checks are complete. Evidence:

• The About, Contact, and service content supplies the principal basis for counterparty verification but does not independently establish the operator.
• The package-pricing and service pages should be reconciled with a formal quotation identifying the contracting entity and delivery obligations.
• The absence of a licensing claim or registration number should be resolved through the relevant local business or professional registry where applicable.

Summary Verdict

The website has a coherent agency presentation and no observed credential-harvesting behavior, but its overall trust posture is critical for sensitive interaction because confirmed blacklist and malicious-detection signals materially contradict the otherwise ordinary business presentation. Operator identity remains unverified, so the site should not be treated as an established or independently validated counterparty.

Infrastructure Integrity

The website is delivered through Vercel’s CDN/WAF infrastructure, with observed edge addresses associated with AS16509 and no origin candidate identified in the analysis. This provides a mitigating layer against direct origin exposure, but CDN protection is an infrastructure safeguard rather than evidence that the operator or content is legitimate.

Closing Assessment

Treat the site as unsuitable for login, credential submission, confidential-data exchange, or financial commitment unless independent counterparty validation and transaction protections are completed through trusted channels.

Signals weighed against the site

• AbuseIPDB: 11 reports on hosting IP 64.29.17.65 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.