Verdict
bigcartel.com appears legitimate.
Our checks found nothing pointing to fraud. Ordinary care still applies when you pay or sign in.
| What this site appears to be | Marketing homepage for a hosted ecommerce platform targeting creators and small businesses. Describes features, plans, example shops, and onboarding steps; encourages sign-up and store creation. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | None flagged itVirusTotal | Clear |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0 reportsAbuseIPDB; shared hosting inflates this count | Noted |
| Domain age | 21 years oldRegistered history | Clear |
| Web archive | Never archivedNo public history of this site | Watch |
| Certificate | Encrypted connectionIssued by WE1 | Noted |
The page as captured
No screenshot is retained for this report.
Key findings
- Automated classification: Not Scam.
- Domain age: more than 10 years (registration continuity).
- No flags from the reputation services TrustSniffer consulted at assessment time.
- The operator behind the site could not be independently connected to a real-world brand or person.
Full analysis
Overview
This website is a hosted ecommerce platform for artists and small businesses, presenting free and paid online-store plans, customizable templates, product listings, payment and shipping setup, digital and physical goods support, print-on-demand services, and related seller tools. Its apparent business model is subscription-based access to storefront functionality, premium features, integrations, and payment-processing capabilities.
Scam/Impersonation Risk
No contradictions were observed: the available evidence shows no phishing, impersonation, malicious reputation, or confirmed abuse indicators. The homepage presents a coherent ecommerce-platform business model with clear onboarding and product descriptions. Behavioral testing did record one suspicious inline script and a generalized suspicious-network classification, but the same testing found no hidden forms, external password forms, wallet-draining activity, clipboard hijacking, or cloaking; the page-level assessment also identified no fraud red flags. The available evidence therefore supports a low scam or impersonation concern, while not independently proving the real-world operator’s identity.
- Homepage: coherent marketing content for hosted online stores, plans, onboarding, templates, payments, and seller resources; no page-level red flags were identified.
- Behavioral testing: no hidden forms, external password forms, wallet activity, clipboard hijacking, or cloaking detected; one suspicious inline script was observed.
- Domain registration record: registered 2005-12-19T17:38:29Z, approximately 20.66 years old.
Regulatory Verification Notes
The site’s apparent commercial activity is ordinary ecommerce-platform provision rather than an explicitly regulated financial service. The available homepage evidence does not independently verify the legal entity operating the service, and no license or registration number is identified in the supplied content; this is a transparency and verification point, not evidence of a scam. The domain is registered through Cloudflare, Inc., and the clean external reputation, established traffic footprint, valid transport encryption, and consistent commercial presentation materially support the conclusion that this is an established, apparently legitimate website. A broker-focused third-party dataset returned no match, which is contextual reputational information rather than a licensing determination.
- Domain registration: registrar identified as Cloudflare, Inc.; recorded registration date is 2005-12-19T17:38:29Z.
- Hosting telemetry: served from AS13335, CLOUDFLARENET — Cloudflare, Inc., US.
- Transport security: TLS certificate issued by WE1, domain-validated (DV), valid to 2026-09-16T01:58:57+00:00.
- External reputation assessment: no malicious or suspicious detections were returned, and the domain was listed within the top one million by global traffic.
What to Verify Next
Before credential or payment interactions, an independent check should reconcile the contracting entity shown in the site’s terms, privacy, billing, cancellation, and refund materials with an authoritative corporate or merchant source. Any applicable consumer-protection, payment-processing, or jurisdiction-specific registration requirements should be confirmed through the relevant official registry. Account creation should use the site’s normal navigation and a unique password, while payment should use a method offering appropriate transaction dispute and buyer-protection rights.
- Homepage: sign-up and store-creation calls to action make account and payment-policy review relevant before transactional use.
- Terms, privacy, billing, cancellation, and refund pages: these should provide the legal entity and material commercial conditions relied upon for engagement.
- Independent registry and payment-provider records: these are the appropriate sources for confirming the contracting merchant and any applicable formal requirements.
Summary Verdict
Available evidence is consistent with an established, apparently legitimate website and supports a high-trust, low-risk posture. The site’s long operating history, clean reputation, substantial public footprint, coherent commercial content, and stable security presentation converge on that conclusion. The operator’s real-world identity remains independently unverified, so the trust assessment should not be treated as proof of a specific legal entity.
Infrastructure Integrity
Cloudflare CDN and WAF protection front the website, and the observed addresses were Cloudflare edge infrastructure rather than a directly exposed origin. This is a meaningful exposure-reduction measure and a mitigating infrastructure signal, although protective hosting alone does not establish legitimacy.
Closing Assessment
Ordinary browsing and standard platform use are proportionate to the assessed posture; credential and payment use should proceed after the routine independent merchant-identity, contractual-policy, and payment-protection checks described above.
Written analysis generated 2026-08-13 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
No rule findings contributed to this verdict.
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 25% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of bigcartel.com.
- The request stayed on bigcartel.com. It was not redirected to another domain. Clear
- Registration is published under Cloudflare, Inc.. Clear
- DNS for this domain is served by cloudflare.com, across 2 name servers. Noted
- The registration is paid up to 2031-12-19. Clear
- It is hosted on CLOUDFLARENET, from a server in US. Noted
Domain intelligence
| Registrar | Cloudflare, Inc. |
|---|---|
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2a06:98c1:58::43 |
| Name servers | NUCUM.NS.CLOUDFLARE.COM, ROHIN.NS.CLOUDFLARE.COM |
| SSL issuer | WE1 |
| SSL expiry | 2026-09-16 |
| Domain age | 20.66 years (continuous registration) |
| Domain expiry | 2031-12-19 |
| Archive first seen | Not available |
| Archive snapshots | 0 |
| Reputation | VirusTotal: 0 flagged | AbuseIPDB: 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about bigcartel.com at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.