Verdict
bashomi.co.za is low-trust and potentially risky.
Several risk patterns were present. Do not send money or personal details until you have verified this business another way.
| What this site appears to be | Informational corporate website for Bashomi Trading & Projects describing a water-saving toilet invention and company services (plumbing, electrical, renovations). Contains contact phone, address, opening hours and company background. No forms or financial solicitations detected. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 2 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0 reportsAbuseIPDB; shared hosting inflates this count | Noted |
| Domain age | 19 years oldRegistered history | Clear |
| Web archive | Archived since 2007452 snapshots | Clear |
| Certificate | Encrypted connectionIssued by YR2 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: more than 10 years (registration continuity).
- Public web-archive history exists since 2007.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Overview
This is the corporate website of Bashomi Trading & Projects, a South African small business presenting a water-saving “Swallowing Toilet” invention alongside plumbing, electrical, building, renovation, and maintenance services, with the apparent business model of selling the product and obtaining contracting work.
Scam/Impersonation Risk
No identity contradiction, impersonation signal, or phishing mechanism was observed in the supplied page evidence. The homepage and related corporate content are informational, contain no login or sensitive-data form, and make no financial solicitation; however, external reputation evidence records a confirmed blacklist hit and malicious classifications. That conflict is material: benign page presentation does not neutralize an established external threat signal, and the site should not be treated as suitable for credential submission or financial interaction. The historical record supports continuity rather than a suspicious repurposing finding, but continuity alone does not resolve the current reputation concern.
- The homepage presents Bashomi Trading & Projects, its “Swallowing Toilet” product, and operational business services; page analysis found no phishing, impersonation, or financial-solicitation indicators.
- Domain registration telemetry records creation on 2009-05-22, with an age of 17.26 years.
- Web-archive telemetry records 452 snapshots from 2007-08-30 through 2026-03-09, spanning 20 years.
- External reputation telemetry records 2 malicious and 2 suspicious detections, together with a blacklist hit.
Regulatory Verification Notes
The About and corporate-content pages identify Bashomi Trading & Projects as owned and managed by three members and state that the business was established in 2006. The site describes commercial services and a product but does not present a license, registration number, or regulator-issued authorization; this is a disclosure gap requiring independent confirmation, not by itself evidence of a scam. The available identity connection remains unverified. No broker-intelligence match was returned, which provides limited contextual reassurance but is not a legal, licensing, or regulatory determination.
- The About page states that the business is owned and managed by three members who act as managing directors.
- The site’s legal and corporate content contains no stated license number or licensing authority.
- Served from AS52148 (ENIXLTD - Enix Ltd, GB).
- TLS certificate issued by YR2 at DV validation level, valid to 2026-10-03.
What to Verify Next
An independent corporate-registry search should confirm the legal entity, directors, operating address, and continuity of the business described on the About page. Any licensing or sector-specific authorization relevant to the proposed contracting engagement should be checked directly with the appropriate authority. Before commercial engagement, contact details and product or service commitments should be validated through an independently sourced channel, and payment arrangements should use protections appropriate to the transaction.
- The About page provides the stated ownership and business-history basis for an independent entity check.
- The Contact page supplies the business contact and location details needed for an offline or independently sourced confirmation.
- The site was observed without forms, login functionality, or sensitive-form destinations during two successful behavioral runs.
Summary Verdict
The overall posture is low trust because confirmed external reputation contradictions outweigh the site’s otherwise ordinary informational presentation and stable technical operation. The real-world operator identity is not independently verified, so the site should be regarded as an unverified business presence with elevated risk for sensitive interaction.
Infrastructure Integrity
The website is protected by a CDN/WAF layer, and the observed infrastructure includes one CDN edge server alongside a potential origin candidate. This provides some exposure mitigation, but protective infrastructure is not proof of legitimacy and does not offset the external reputation concern.
- CDN/WAF protection was observed; the recorded edge address was 208.101.7.96 on AS36351.
- Infrastructure resolution identified 2 unique IPs, including 1 edge IP and 1 likely origin candidate.
Closing Assessment
Passive review may continue for information gathering, but credentials, confidential information, and financial commitments should be withheld unless the entity and transaction are independently validated through trusted channels.
Written analysis generated 2026-08-21 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
1 finding contributed to this verdict, raised by analysis engine.
01 Sensitive Interaction Risk
- The analysis matched a pattern TrustSniffer treats as a direct threat to a visitor.Analysis engine
signal:direct_threat
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of bashomi.co.za.
- The request stayed on bashomi.co.za. It was not redirected to another domain. Clear
- Registration is published under DIAMATRIX C.C.. Clear
- DNS for this domain is served by cloudns.io, across 2 name servers. Noted
- The registration is paid up to 2027-05-22. Noted
- The earliest public archive of this site is from 2007-08-30. Clear
- It is hosted on ENIXLTD, from a server in GB. Noted
Domain intelligence
| Registrar | DIAMATRIX C.C. |
|---|---|
| Hosting | ENIXLTD - Enix Ltd, GB |
| Country | GB |
| Server IP | 91.204.209.201 |
| Name servers | ns1.da.cloudns.io, ns2.da.cloudns.io |
| SSL issuer | YR2 |
| SSL expiry | 2026-10-03 |
| Domain age | 18.98 years (continuous registration) |
| Domain expiry | 2027-05-22 |
| Archive first seen | 2007-08-30 |
| Archive snapshots | 452 |
| Reputation | VirusTotal: 2 flagged | AbuseIPDB: 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about bashomi.co.za at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.