Is boonruksashop.com a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

The website is a Thai-language ecommerce store presenting religious and ceremonial gift sets, Buddhist offering products, online merit-making services, and event-organization assistance. Its apparent business model is direct retail sales and service fees, with product pricing, telephone contacts, an email address, and a physical address displayed to visitors.

Scam/Impersonation Risk

The site’s visible content presents an ordinary religious-goods retail model and the reviewed page contains no obvious phishing form, wallet-connect mechanism, credential-harvesting flow, or explicit brand-impersonation indicator. However, this benign presentation is outweighed by confirmed external threat detections: the domain is reported as blacklisted by multiple sources, including a detection associated with Fortinet, and the resulting contradiction is material to any sensitive interaction. The site should therefore be treated as presenting a critical risk for login, credential submission, payment, or other financially consequential activity. No identity contradiction between distinct legal-entity names was observed. Evidence:

• The homepage presents religious gift sets and event services, but the page analysis recorded no phishing indicators, hidden forms, or sensitive-form destinations.
• External reputation analysis recorded 9 malicious detections and a confirmed blacklist hit, with Fortinet identified among the flagged vendors.
• Domain registration: 2012-01-11; approximately 14.62 years old.

Regulatory Verification Notes

The business model is a conventional online shop rather than an inherently high-risk financial service. The homepage identifies products such as ordination sets, alms-giving sets, and funeral-ceremony sets, including listed prices, and advertises comprehensive merit-event organization. The available material does not show a claimed license or registration number; this is a regulatory-transparency gap requiring independent confirmation, not by itself evidence of fraud. The real-world operator identity remains unverified, so the displayed contact and location details should not be treated as independently established legal-entity evidence. Evidence:

• The homepage lists product categories and prices, including ordination sets priced at 18,987.00, 29,829.00, and 39,987.00, and funeral-ceremony sets priced from 1,196.00 to 2,396.00.
• The contact section displays telephone numbers, a fax number, an email address, and a physical address.
• The site’s available business and information pages do not display a license authority or license number.

What to Verify Next

Any prospective transaction should first be validated through the relevant Thai business-registration and consumer-protection channels, including confirmation that the named operator and physical premises correspond to a registered business. Payment should use a method offering dispute and chargeback protection, and contact channels should be confirmed through an independently sourced route before funds or personal information are provided. The site should not be used for account login or credential submission while the confirmed blacklist status remains unresolved. Evidence:

• The operator identity is marked unverified despite the site displaying business contact details.
• Licensing and registration information is not identified in the available site content.
• The external reputation evidence includes blacklist confirmation from two sources.

Summary Verdict

The overall posture is critical and unsuitable for sensitive interaction. Although the storefront presentation is coherent and lacks several common on-page phishing mechanisms, the confirmed external threat detections and blacklist status dominate the assessment. The site’s apparent commercial purpose does not provide sufficient assurance to offset that evidence.

Infrastructure Integrity

The site resolves directly to hosting infrastructure operated by METRABYTE-TH in Thailand, with no CDN or WAF layer identified and a likely origin address exposed. Transport encryption is present, but the certificate is domain-validated only; these controls provide basic service integrity and do not establish operator legitimacy or offset the external reputation risk. Evidence:

• Hosted on AS56067, METRABYTE-TH, Thailand.
• TLS certificate issued by YR2, validation level DV, valid to 2026-10-25T03:13:00+00:00.
• Infrastructure resolution identified 1 unique IP, 0 edge IPs, and 1 likely origin IP; no CDN was detected.

Closing Assessment

Sensitive actions should be withheld unless and until the blacklist findings are independently resolved and the operator is validated through authoritative business and payment-protection channels.