Verdict
babuyana.com shows high-risk / scam indicators.
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
| What this site appears to be | Bangladeshi ecommerce storefront (Babuyana) offering clothing and accessories with product listings, prices, discount badges, stock counts, contact details and live chat links via WhatsApp/Messenger. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 10 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0 reportsAbuseIPDB; shared hosting inflates this count | Noted |
| Domain age | 8 months oldMost scam domains are under a year old | Watch |
| Web archive | Archived since 2020Public history exists | Clear |
| Certificate | Encrypted connectionIssued by Sectigo Public Server Authentication CA DV R36 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- Public web-archive history exists since 2020.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Security Alert
Fortinet, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
Babuyana is a Bangladeshi ecommerce storefront presenting clothing, three-piece garments, hijabs, handbags, discounts, stock counts, shopping-cart functionality, checkout, and customer-contact options through WhatsApp and Messenger. Its apparent business model is direct online retail to Bangladeshi customers.
Scam/Impersonation Risk
Confirmed external reputation contradictions make sensitive interaction with this storefront high risk, despite the ordinary ecommerce presentation and the absence of detected brand impersonation or identity inconsistency on the supplied pages. The domain is reported as blacklisted by two sources, with 10 malicious detections and Tier-1 detections associated with Fortinet and Sophos. This is materially stronger than the page-level content assessment, which found no intrinsic ecommerce red flags; the clean storefront appearance therefore does not offset the external threat signal. No suspicious contact-email anomaly was identified.
- The homepage presents Babuyana as a retail shop with product listings, prices, discount badges, stock counts, add-to-cart controls, and checkout.
- External reputation results record 10 malicious detections from 15 effective detections and identify Fortinet and Sophos among the flagged vendors.
- The domain is recorded as blacklisted by both VT and an external blacklist; Google Safe Browsing is recorded as not malicious.
- Domain registration telemetry records creation on 2025-12-18 and an age of 0.67 years.
Regulatory Verification Notes
The about, how-to-buy, and why-us pages provide a retail proposition and purchasing mechanics, but the supplied content does not show a business registration number, licensing information, or visible payment-provider accreditation. For an ordinary clothing retailer, this is a disclosure and merchant-identity verification gap rather than, by itself, evidence of a scam. The available identity linkage is assessed as likely rather than independently verified, and the absence of a matching broker record provides no regulatory endorsement. Transport security is present, but domain-validated encryption confirms connection security only and does not establish the operator’s legal identity or entitlement to trade.
- The about, how-to-buy, and why-us pages are present, while the captured content does not display a registration number, license number, or payment-provider badges.
- The site links to Facebook, YouTube, WhatsApp, and Messenger, with two trusted social links counted in the identity assessment.
- The site is hosted by NAMECHEAP-NET — Namecheap, Inc., US, on AS22612.
- TLS is issued by Sectigo Public Server Authentication CA DV R36 at DV validation level and is valid through 2026-12-19.
What to Verify Next
Before any purchase or submission of personal or payment information, an independent business-identity check should confirm the merchant’s legal name, physical operating details, return terms, and applicable Bangladeshi commercial registration. Payment should be limited to a method offering meaningful buyer protection, with confirmation that the checkout recipient matches the independently verified merchant. Official contact channels should also be confirmed through an independent route rather than relying solely on links presented on the storefront.
- The homepage and product pages support direct ordering through cart and checkout functions.
- The how-to-buy page describes the purchasing process but does not, in the supplied content, establish an independently verified merchant identity.
- The contact and live-chat pathways include WhatsApp and Messenger sales channels.
- The captured form set contains three forms for cart, checkout/contact, and live chat, with no password form detected.
Summary Verdict
The overall posture is critical trust risk. The storefront’s conventional retail content is outweighed by confirmed external malicious and blacklist detections, so the site should not be treated as suitable for login, credential submission, or financial interaction. Apparent identity linkage remains insufficient to convert the assessment into an established legitimate-entity determination.
Infrastructure Integrity
The site resolves directly to a single hosting address on Namecheap infrastructure, with no CDN edge identified in the supplied network facts. The valid DV certificate and identifiable hosting arrangement provide basic transport and infrastructure observability, but they do not mitigate the confirmed reputation risk.
- Hosting is recorded on AS22612, NAMECHEAP-NET — Namecheap, Inc., US.
- Infrastructure telemetry records 1 unique IP, 0 edge IPs, and 1 likely origin IP.
- The TLS certificate issuer is Sectigo Public Server Authentication CA DV R36, with expiry at 2026-12-19T23:59:59+00:00.
Closing Assessment
The appropriate disposition is passive viewing only, with no login, credential submission, checkout, or financial transaction until the site’s identity and reputation concerns have been independently resolved.
Written analysis generated 2026-08-20 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
2 findings contributed to this verdict, raised by registration and ownership, analysis engine, behaviour in a sandbox, external reputation.
01 Governance Risk
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
02 Sensitive Interaction Risk
- The analysis matched a pattern TrustSniffer treats as a direct threat to a visitor.Analysis engine
signal:direct_threat - The structure of the page changed sharply while it was loading.Behaviour in a sandbox
rule:BEHAV_DOM_DENSITY_SPIKE - An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
Identity verification
| Status | LIKELY |
|---|---|
| Identity score | 76/100 |
| Identity verification confidence | 76% |
- Trusted social count=2
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of babuyana.com.
- The request stayed on babuyana.com. It was not redirected to another domain. Clear
- Registration is published under NameCheap, Inc.. Clear
- DNS for this domain is served by namecheaphosting.com, across 2 name servers. Noted
- The registration is paid up to 2026-12-18. Noted
- The earliest public archive of this site is from 2020-08-04. Clear
- It is hosted on NAMECHEAP-NET, from a server in US. Noted
Domain intelligence
| Registrar | NameCheap, Inc. |
|---|---|
| Hosting | NAMECHEAP-NET - Namecheap, Inc., US |
| Country | US |
| Server IP | 198.54.125.239 |
| Name servers | DNS1.NAMECHEAPHOSTING.COM, DNS2.NAMECHEAPHOSTING.COM |
| SSL issuer | Sectigo Public Server Authentication CA DV R36 |
| SSL expiry | 2026-12-19 |
| Domain age | 0.67 years (continuous registration) |
| Domain expiry | 2026-12-18 |
| Archive first seen | 2020-08-04 |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 10 flagged | AbuseIPDB: 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about babuyana.com at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.