Verdict
bigdeal.com.ua shows high-risk / scam indicators.
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
| What this site appears to be | BigDeal is a Ukrainian wholesale jewelry ecommerce site (based in Kryvyi Rih) listing many product SKUs, prices in UAH, contact phone numbers and email, delivery/payment and certificate pages, and login/registration for accounts. Minimum order and wholesale positioning are stated. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 8 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0 reportsAbuseIPDB; shared hosting inflates this count | Noted |
| Domain age | 9.1 years oldRegistered history | Clear |
| Web archive | Archived since 2010Public history exists | Clear |
| Certificate | Encrypted connectionIssued by YR1 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: 3 to 10 years (registration continuity).
- Public web-archive history exists since 2010.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Security Alert
Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
BigDeal is a Ukrainian wholesale jewellery e-commerce storefront based in Kryvyi Rih, presenting rings, earrings, bracelets, pendants, chains, Swarovski items and accessories with prices in UAH, a stated minimum order, delivery and payment information, certificates, discount arrangements, and customer account functionality. Its apparent business model is direct wholesale product sales through an online catalogue and shopping basket.
Scam/Impersonation Risk
Confirmed external contradiction. Although the homepage presents a conventional wholesale jewellery operation with product listings, prices, contact details, and no detected page-level phishing or brand-impersonation indicators, external security telemetry records malicious detections and a confirmed blacklist hit from multiple sources. That signal takes precedence over the otherwise ordinary storefront presentation and creates a serious risk for login, credential, payment, and other sensitive interactions. No identity contradiction between distinct legal-entity names was observed, and the available evidence does not establish that the site is impersonating a named brand.
- External reputation telemetry records a confirmed blacklist hit from two external sources and malicious detections, including a Tier-1 security-vendor flag.
- The homepage contains login and registration forms alongside a product search and order-cart function, creating an account and transaction interaction surface.
- The homepage presents wholesale jewellery products such as Xuping accessories and Swarovski crystal items with UAH pricing, but this commercial content does not resolve the external security contradiction.
- Domain registration records show creation on 2017-07-30, with an age of 9.06 years.
Regulatory Verification Notes
The site identifies itself through its BigDeal trading presentation, a Kryvyi Rih location, telephone contact, delivery and payment information, and a certificates page. However, the available evidence does not independently verify the operating legal entity, and the site's licensing or registration disclosure is unclear; the presence of product certificates should not be treated as proof of corporate registration, trading authorization, or consumer-protection compliance. The domain is registered through ТОВ "Центр інтернет-імен України", while its transport security uses a domain-validated certificate, which authenticates encrypted transport rather than the operator's legal identity. No broker-dataset match was recorded; that absence is contextual only and is not a regulatory determination.
- The contact and homepage content identifies Kryvyi Rih, publishes two telephone numbers, and provides stated business hours.
- The certificates, delivery-and-payment, and discount-program pages are presented as supporting business information, but no verified licensing or registration number is evidenced.
- Domain registration: 2017-07-30T19:52:19Z; registrar: ТОВ "Центр інтернет-імен України"; expiration: 2027-07-30T19:52:19Z.
- Hosted on AS24940 (HETZNER-AS - Hetzner Online GmbH, DE); TLS certificate issued by YR1 at DV validation level, valid to 2026-09-20T19:50:23+00:00.
What to Verify Next
Before any sensitive engagement, an independent party should confirm the operating company and its authority to trade through Ukrainian corporate and consumer-protection registers, reconcile that entity with the details shown on the site's contact and certificates pages, and validate delivery, refund, payment-protection, and minimum-order terms through independently sourced contact channels. Credentials should not be reused, and any payment should use a method offering dispute and chargeback protections. The external security detections should also be resolved by obtaining an independent security review of the exact domain and transaction flow.
- The contact page and homepage publish business contact details that can be compared with independently obtained registry information.
- The certificates page provides a stated basis for product-related checking, but the available evidence does not show an independently verified corporate or licensing record.
- The delivery-and-payment and discount-program pages define commercial conditions that require independent confirmation before payment.
- The account interface includes login and registration functions, making credential hygiene and transaction controls material verification points.
Summary Verdict
The website has a critical trust posture because confirmed external security contradictions outweigh its plausible e-commerce presentation and stable technical operation. The operator identity remains unverified, so the available evidence does not support treating the site as an established or trustworthy counterparty for sensitive activity.
Infrastructure Integrity
The site is protected by a CDN/WAF arrangement, and all observed addresses were treated as edge infrastructure rather than an independently exposed origin. This reduces direct origin exposure and may limit opportunistic infrastructure attacks, but it is only a mitigating control and does not counteract the external reputation findings.
- Two observed edge addresses were associated with AS24940; no likely origin candidate was identified.
- The infrastructure resolved through CDN/WAF protection with the origin server not observable in the analysis.
Closing Assessment
The proportionate operational posture is to restrict activity to passive viewing until the external detections and counterparty identity have been independently resolved; login, credential submission, and financial transactions should not proceed in the interim.
Written analysis generated 2026-08-21 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
2 findings contributed to this verdict, raised by registration and ownership, analysis engine, behaviour in a sandbox, external reputation.
01 Governance Risk
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
02 Sensitive Interaction Risk
- The analysis matched a pattern TrustSniffer treats as a direct threat to a visitor.Analysis engine
signal:direct_threat - The page rewrote itself after it was interacted with, so what a visitor first sees is not what they end up on.Behaviour in a sandbox
rule:BEHAV_DOM_DIFF_AFTER_INTERACTION - An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of bigdeal.com.ua.
- The request stayed on bigdeal.com.ua. It was not redirected to another domain. Clear
- Registration is published under ТОВ "Центр інтернет-імен України". Clear
- DNS for this domain is served by inhostedns.com, across 3 name servers. Noted
- The registration is paid up to 2027-07-30. Noted
- The earliest public archive of this site is from 2010-09-30. Clear
- It is hosted on HETZNER-AS, from a server in DE. Noted
Domain intelligence
| Registrar | ТОВ "Центр інтернет-імен України" |
|---|---|
| Hosting | HETZNER-AS - Hetzner Online GmbH, DE |
| Country | DE |
| Server IP | 2a01:4f8:241:4e4e::1 |
| Name servers | ns117.inhostedns.com, ns217.inhostedns.net, ns317.inhostedns.org |
| SSL issuer | YR1 |
| SSL expiry | 2026-09-20 |
| Domain age | 9.06 years (continuous registration) |
| Domain expiry | 2027-07-30 |
| Archive first seen | 2010-09-30 |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 8 flagged | AbuseIPDB: 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about bigdeal.com.ua at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.