Verdict
fushop.org shows high-risk / scam indicators.
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
| What this site appears to be | Retail product listing page for household goods (toilet paper, wipes, bags) showing prices, promotions (free shipping over $99, clearance). Contains search, cart, login/register and feedback forms. Footer includes policy and contact links but no visible verifiable physical address. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 7 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0 reportsAbuseIPDB; shared hosting inflates this count | Noted |
| Domain age | 1.9 years oldRegistered history | Clear |
| Web archive | Archived since 2024Public history exists | Clear |
| Certificate | Encrypted connectionIssued by YE1 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: 1 to 3 years (registration continuity).
- Public web-archive history exists since 2024.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Overview
This website is an online retail storefront presenting household consumables such as toilet paper, disinfecting wipes, and food-storage bags, with discounted pricing, clearance promotions, free shipping above a stated order threshold, shopping-cart functionality, account registration, and checkout.
Scam/Impersonation Risk
Critical sensitive-interaction risk is present. The site’s visible content is consistent with an ordinary e-commerce model and does not show detected brand impersonation, but that surface presentation is outweighed by confirmed blacklist results from multiple external sources and multiple malicious detections. The homepage also exposes login, registration, checkout, and feedback functionality, while page analysis identified hidden-form indicators; these features create a sensitive interaction surface despite the absence of observed wallet-draining, clipboard-hijacking, or suspicious external-post behavior. No conflicting legal-entity names or direct brand-impersonation finding were observed, so the principal concern is the confirmed external reputation signal rather than a demonstrated identity conflict.
- The homepage presents household-goods listings, promotions, cart actions, account access, and checkout functionality.
- Page analysis recorded a login form and hidden-form indicators on the homepage.
- External reputation assessment recorded 7 malicious and 1 suspicious detections, with confirmed blacklist status.
- WHOIS records show registration on 2026-03-05 through Porkbun LLC; the reconciled domain age is 1.90 years.
Regulatory Verification Notes
The site’s apparent business model is retail commerce rather than a visibly regulated financial service, but its identity verification remains unverified. The footer provides policy and contact links, yet no verifiable physical address is visible, and the available material does not establish a responsible corporate operator or a registration or licensing basis. Ownership opacity is therefore a material governance limitation, while the absence of a claimed sector licence should be treated as a disclosure and verification issue rather than a standalone fraud determination.
- The homepage footer links to policy and contact material but displays no verifiable physical address.
- WHOIS identifies Porkbun LLC as registrar and records the domain expiration date as 2027-03-05T09:20:57Z.
- The site’s TLS certificate is DV-validated, issued by YE1, and valid to 2026-09-29T19:28:03+00:00.
What to Verify Next
Before any sensitive interaction, an acquiring institution or prospective customer should independently confirm the operator’s legal name, physical business presence, fulfilment capability, and applicable consumer-protection obligations. Payment should be limited to methods offering meaningful dispute and chargeback protection, and the policy, returns, shipping, and privacy terms should be checked for consistency with the independently established operator. Official contact channels should be confirmed through an independent route rather than relying solely on the site.
- The homepage offers product ordering and checkout but does not provide a visible verifiable address.
- The site exposes policy, shipping, FAQ, and contact links that can be checked against independently confirmed business details.
- The account and checkout functions create a need to validate merchant identity before credentials or payment information are submitted.
Summary Verdict
The overall posture is critical risk, with the site unsuitable for login, credential submission, or financial interaction on the available evidence. Its retail presentation does not offset the confirmed external reputation contradictions and unresolved operator identity.
Infrastructure Integrity
The website is protected by Cloudflare CDN/WAF infrastructure, which mitigates some direct exposure and explains the presence of shared edge infrastructure; this is a protective technical measure, not evidence of legitimacy. Observed infrastructure also included potential origin candidates, so the protective value should not be interpreted as proof of a controlled or trustworthy operator.
- Served from AS13335 (CLOUDFLARENET - Cloudflare, Inc., US).
- Observed CDN edge IPs included 104.21.50.116 and 172.67.162.117 on AS13335, alongside other hosting addresses.
- Transport encryption used a valid DV TLS certificate issued by YE1, expiring 2026-09-29T19:28:03+00:00.
Closing Assessment
Prospective users and institutions should restrict activity to non-sensitive viewing and should not authenticate, submit credentials, or initiate purchases until the operator and transaction protections have been independently established.
Written analysis generated 2026-08-22 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
2 findings contributed to this verdict, raised by registration and ownership, analysis engine, behaviour in a sandbox, external reputation.
01 Governance Risk
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
02 Sensitive Interaction Risk
- The analysis matched a pattern TrustSniffer treats as a direct threat to a visitor.Analysis engine
signal:direct_threat - The page rewrote itself after it was interacted with, so what a visitor first sees is not what they end up on.Behaviour in a sandbox
rule:BEHAV_DOM_DIFF_AFTER_INTERACTION - An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of fushop.org.
- The request stayed on fushop.org. It was not redirected to another domain. Clear
- Registration is published under Porkbun LLC. Clear
- DNS for this domain is served by cloudflare.com, across 2 name servers. Noted
- The registration is paid up to 2027-03-05. Noted
- The earliest public archive of this site is from 2024-09-27. Clear
- It is hosted on CLOUDFLARENET, from a server in US. Noted
Domain intelligence
| Registrar | Porkbun LLC |
|---|---|
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:3035::ac43:a275 |
| Name servers | irma.ns.cloudflare.com, pranab.ns.cloudflare.com |
| SSL issuer | YE1 |
| SSL expiry | 2026-09-29 |
| Domain age | 1.90 years (continuous registration) |
| Domain expiry | 2027-03-05 |
| Archive first seen | 2024-09-27 |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 7 flagged | AbuseIPDB: 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about fushop.org at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.