Verdict
cafebazaar.ir appears legitimate.
Our checks found nothing pointing to fraud. Ordinary care still applies when you pay or sign in.
| What this site appears to be | Persian-language Android app marketplace (بازار). Presents itself as a major Persian app store offering downloads for apps and games (including bank apps), security scanning, categories for kids and films/series, and developer support. Content focuses on distribution and app ecosystem features. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | None flagged itVirusTotal | Clear |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 1 report; shared hosting inflates reports | Clear |
| Domain age | 15 years oldRegistered history | Clear |
| Web archive | Archived since 20111334 snapshots | Clear |
| Certificate | Encrypted connectionIssued by Certum DV TLS G2 R39 CA | Noted |
The page as captured
No screenshot is retained for this report.
Key findings
- Automated classification: Not Scam.
- Domain age: more than 10 years (registration continuity).
- Public web-archive history exists since 2011.
- VirusTotal and Google Safe Browsing had no flags for this domain; its hosting IP carries AbuseIPDB reports below the confidence level TrustSniffer treats as a flag.
Full analysis
Overview
This website is a Persian-language Android application marketplace branded as بازار, presenting app and game downloads, developer distribution, security screening, child-focused content, films and series, and listings for banking and payment applications. Its apparent business model is a localized app-store ecosystem supported by app distribution, developer services, promotions, advertising, and related in-app commerce.
Scam/Impersonation Risk
No contradictions were observed. The homepage’s marketplace presentation is internally consistent with an established app-store service: it describes Android downloads, developer hosting, antivirus screening, children’s content, and official banking-application listings, without phishing indicators, brand impersonation, or conflicting legal identities. External reputation checks were clean for malicious or suspicious classifications. One abuse report concerned a shared content-delivery provider address rather than the website specifically, had zero attribution confidence, and was therefore appropriately discounted as a site-level finding.
- The homepage presents a Persian Android app marketplace with app downloads, developer services, antivirus screening, children’s categories, and banking applications.
- Historical domain continuity shows registration in 2011, with an age of approximately 15.32 years.
- The web archive records 1,334 snapshots spanning 2011–2026, covering 16 tracked years.
- The homepage capture returned successfully and contained no login form, hidden sensitive form, wallet connection, or identified impersonation indicator.
Regulatory Verification Notes
The site provides navigation to terms of use, privacy, about, contact, developer support, advertising, and related service information, which is consistent with a mature consumer platform. However, the available page evidence does not independently verify the real-world operator identity, and no licensing authority or license number is evidenced for the marketplace. This is a regulatory and disclosure verification point rather than evidence of deception. The available third-party broker-reputation check returned no match, but that contextual result is not a legal, licensing, or regulatory determination.
- The site navigation includes “Terms of Use,” “Privacy,” “About,” “Contact,” developer support, advertising, news, and technical blog pages.
- The homepage claims that بازار is the largest Persian-language store and a comprehensive Iranian reference for Android applications and games; these are on-site claims, not independent proof of corporate identity.
- The homepage states that it hosts official banking and payment applications and that submitted applications pass antivirus screening; these claims should be assessed against the platform’s published governance and developer controls.
- The site is served from AS202319, Sotoon-CDN – Hezardastan Unit Cloud Computing PJSC, Iran; its TLS certificate is DV, issued by Certum DV TLS G2 R39 CA, valid through 2026-10-08.
What to Verify Next
Before credential or payment interactions, an institution should independently confirm the merchant identity behind the service, review the terms, privacy, and contact materials in full, and establish the applicable consumer-protection and payment-dispute arrangements. The official support and contact channels should also be confirmed through an independent route rather than relying solely on information presented within the site.
- The terms-of-use, privacy, about, and contact entries are available through the site navigation and are the appropriate documents for identity, responsibility, and consumer-rights review.
- The developer-support and advertising entries indicate that the platform supports third-party commercial participation, making confirmation of merchant and payment responsibilities material.
- The homepage contains no sensitive submission form in the captured view, so credential and payment controls should be assessed at the point where those interactions are initiated.
Summary Verdict
Available evidence is consistent with an established, apparently legitimate website supporting a high-trust, low-risk posture. The conclusion is well grounded in converging historical continuity, substantial public usage, coherent marketplace content, stable operation, and clean threat-reputation results, while the real-world operator identity remains independently unverified.
Infrastructure Integrity
The site resolves directly to a single identified hosting address operated through Sotoon-CDN – Hezardastan Unit Cloud Computing PJSC in Iran, without a detected third-party CDN or WAF edge layer. The active DV TLS certificate provides transport protection, but hosting and encryption infrastructure should be treated as mitigating technical controls rather than proof of operator legitimacy.
Closing Assessment
Ordinary use may proceed on a proportionate basis, with independent merchant-identity, return-policy, and payment-protection checks completed before credentials or payments are submitted.
Written analysis generated 2026-08-11 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
No rule findings contributed to this verdict.
Signals weighed against the site
- AbuseIPDB: 1 report on hosting IP 185.166.104.93 (Avaye Hamrahe Houshmande Hezardastan PJSC, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of cafebazaar.ir.
- The request stayed on cafebazaar.ir. It was not redirected to another domain. Clear
- Registration is published under IRNIC. Clear
- DNS for this domain is served by sotoon53.com, across 2 name servers. Noted
- The earliest public archive of this site is from 2011-04-16. Clear
- It is hosted on Sotoon-CDN, from a server in IR. Noted
Domain intelligence
| Registrar | IRNIC |
|---|---|
| Hosting | Sotoon-CDN - Hezardastan Unit Cloud Computing PJSC, IR |
| Country | IR |
| Server IP | 185.166.104.93 |
| Name servers | ns.sotoon53.com, c.ns.sotoon53.com |
| SSL issuer | Certum DV TLS G2 R39 CA |
| SSL expiry | 2026-10-08 |
| Domain age | 15.32 years (continuous registration) |
| Domain expiry | Not available |
| Archive first seen | 2011-04-16 |
| Archive snapshots | 1334 |
| Reputation | VirusTotal: 0 flagged | AbuseIPDB: 0% confidence, 1 report | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about cafebazaar.ir at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.