Verdict
himalayansherpa.com.au shows high-risk / scam indicators.
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
| What this site appears to be | Local Melbourne-based Nepalese dumpling (momo) vendor operating as a mobile food truck with history dating to 2003, offering fresh and frozen products plus catering services. Site appears informational/commercial with standard WordPress theme. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 6 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0 reportsAbuseIPDB; shared hosting inflates this count | Noted |
| Domain age | 18 years oldRegistered history | Clear |
| Web archive | Archived since 2009Public history exists | Clear |
| Certificate | Encrypted connectionIssued by YR1 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: more than 10 years (registration continuity).
- Public web-archive history exists since 2009.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Security Alert
Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
This website presents Mr Momo Handmade Nepalese Dumplings, a Melbourne-based mobile food-truck business offering freshly prepared Nepalese dumplings, frozen take-home packs, catering, and appearances at festivals and markets. Its stated purpose is informational and commercial, supporting direct food sales and catering enquiries under the Himalayan Sherpa name.
Scam/Impersonation Risk
The site’s visible content describes an ordinary local food business and contains no observed login form, payment credential prompt, wallet-connect function, brand-impersonation indicator, or identity inconsistency. However, this benign presentation is outweighed by confirmed external threat detections and a confirmed blacklist status, including multiple malicious classifications. The resulting risk is materially elevated for sensitive interactions, and the site should not be treated as safe for credential submission, financial activity, or other high-consequence actions. No specific phishing or impersonation pattern was independently identified in the page content, but the external reputation contradiction remains decisive.
- The homepage presents a local restaurant and food-truck business, with no login form, hidden form, or sensitive-input form detected.
- External reputation checks recorded 6 malicious detections, 1 suspicious detection, and a confirmed blacklist status from 2 listed sources.
- The domain-age record reports 17.587953456536617 years of age.
Regulatory Verification Notes
The site does not independently establish the real-world operator’s identity, and its regulatory disclosure state is unclear. The supplied page content contains no stated licence authority or licence number; this is a verification gap rather than, by itself, evidence of a scam. The registration record identifies Himalayan Sherpa Pty Ltd as the registrant and Web Address Registration Pty Ltd as registrar, but those technical registration details do not independently validate the business’s current operating permissions. The separate broker-reputation dataset produced no match, which provides no additional adverse broker-specific signal but is not a licensing or regulatory determination.
- The site’s visible pages provide no licence authority or licence number.
- The registration record lists Himalayan Sherpa Pty Ltd as owner and Web Address Registration Pty Ltd as registrar.
- The site is served on AS38719 through DREAMSCAPE-AS-AP — Dreamscape Networks Limited, AU.
- The transport certificate is issued by YR1, uses DV validation, and is valid to 2026-10-12T07:18:37+00:00.
What to Verify Next
Before any sensitive interaction, an independent party should confirm that Himalayan Sherpa Pty Ltd is the current operator through the relevant Australian corporate and local-authority records, and separately confirm any food-business permissions applicable to the stated activities. Contact channels should be validated through an independently sourced business record or offline route rather than relying solely on the website. Any proposed payment should use a protected method with dispute rights, and credentials should not be reused for this interaction.
- The site identifies the business as Himalayan Sherpa and states that the underlying business history dates to 2003.
- The homepage capture completed successfully with an HTTP 200 response and showed no external form destination.
- Behavioural testing recorded 0 external XHR/fetch requests, 0 wallet-connect runs, and 0 wallet-drainer runs.
Summary Verdict
The overall posture is critical risk for sensitive interaction. Although the website’s content is coherent with a conventional local business, that apparent legitimacy is not independently verified and does not overcome the confirmed external reputation contradiction. Normal browsing may be possible, but the available evidence does not support treating the site as trustworthy for credentials, payments, or other sensitive activity.
Infrastructure Integrity
The site resolves to a single likely origin address without a detected CDN or WAF layer. It is hosted through DREAMSCAPE-AS-AP — Dreamscape Networks Limited, AU, on AS38719, with the resolved infrastructure located in Singapore; this provides technical reachability but does not establish legitimacy. The valid DV TLS certificate protects transport confidentiality only and cannot offset the external reputation findings.
Closing Assessment
Sensitive use should be withheld unless the operator, applicable permissions, and transaction channel are independently confirmed through trusted records; where confirmation is unavailable, the interaction should remain limited to non-sensitive observation.
Written analysis generated 2026-08-20 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
2 findings contributed to this verdict, raised by registration and ownership, analysis engine, external reputation.
01 Governance Risk
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
02 Sensitive Interaction Risk
- The analysis matched a pattern TrustSniffer treats as a direct threat to a visitor.Analysis engine
signal:direct_threat - An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of himalayansherpa.com.au.
- The request stayed on himalayansherpa.com.au. It was not redirected to another domain. Clear
- Registration is published under Web Address Registration Pty Ltd. Clear
- DNS for this domain is served by vodien.com, across 3 name servers. Noted
- The earliest public archive of this site is from 2009-01-17. Clear
- It is hosted on DREAMSCAPE-AS-AP, from a server in SG. Noted
Domain intelligence
| Registrar | Web Address Registration Pty Ltd |
|---|---|
| Hosting | DREAMSCAPE-AS-AP - Dreamscape Networks Limited, AU |
| Country | SG |
| Server IP | 101.100.203.115 |
| Name servers | ns1.vodien.com, ns2.vodien.com, ns3.vodien.com |
| SSL issuer | YR1 |
| SSL expiry | 2026-10-12 |
| Domain age | 17.59 years (continuous registration) |
| Domain expiry | Not available |
| Archive first seen | 2009-01-17 |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 6 flagged | AbuseIPDB: 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about himalayansherpa.com.au at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.