Verdict
oldplum.com is moderately trusted.
Most signals looked ordinary, and some evidence was missing. Read the checks below before you pay or hand over personal details.
| What this site appears to be | Serbian-language e-commerce site for a distillery selling plum brandy (rakija). Contains age verification gate and standard account forms (login/register/reset). Appears as a standard WordPress shop with product listings and basic social link to Instagram. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | None flagged itVirusTotal | Clear |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0 reportsAbuseIPDB; shared hosting inflates this count | Noted |
| Domain age | 4.4 years oldRegistered history | Clear |
| Web archive | Archived since 2024Public history exists | Clear |
| Certificate | Encrypted connectionIssued by YR2 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: 3 to 10 years (registration continuity).
- Public web-archive history exists since 2024.
- No flags from the reputation services TrustSniffer consulted at assessment time.
Full analysis
Overview
This Serbian-language website presents an age-gated online shop for a distillery, offering plum brandy (rakija) products from the Bosiljčić family and providing standard e-commerce functions for browsing products, creating accounts, and placing orders.
Scam/Impersonation Risk
No contradictions were observed: the available evidence contains no phishing, impersonation, malicious-listing, or blacklist indicators, and the site’s content is consistent with a small spirits retailer rather than a copied financial or technology service. The homepage uses an age-verification gate and displays specific products, including plum brandy aged five, ten, and fifteen years. Standard login, registration, and password-reset forms are present, so account credentials remain a sensitive interaction even though no untrusted form destination or hidden form was detected. Behavioral testing identified two suspicious inline scripts, substantial post-interaction page mutation, and a small synthetic-response signal; these are technical anomalies that warrant ordinary caution but do not, on the supplied evidence, establish fraud or impersonation.
- The homepage contains an age-verification gate and product listings for five-, ten-, and fifteen-year plum brandy.
- The homepage provides login, registration, and password-reset forms; analysis recorded zero hidden forms and zero password forms submitting externally.
- Behavioral testing recorded 2 suspicious inline scripts, a maximum DOM difference of 1113, and a synthetic-response ratio of 0.6%.
- The domain was registered on 2022-03-18 and is approximately 4.43 years old; the registrar is PDR Ltd. d/b/a PublicDomainRegistry.com.
Regulatory Verification Notes
The About and homepage content identifies the business as “Distillery Bosiljčić” and refers to the Bosiljčić family, while the Contact and product areas support the appearance of a genuine small retail operation. The reviewed content does not present a licensing authority or license number for the sale or production of alcoholic beverages. That is a regulatory-transparency item requiring independent confirmation, not evidence of a scam. The site’s Serbian-language retail model, age control, and product-specific presentation are coherent, but the available material does not independently verify the operating entity or its regulatory standing. A third-party broker-reputation dataset returned no match; this is contextual only and is not a licensing determination.
- The homepage and About content name “Distillery Bosiljčić” and describe the Bosiljčić family.
- The reviewed pages contain no stated license authority or license number.
- The hosting infrastructure was observed on AS24940, HETZNER-AS – Hetzner Online GmbH, DE.
- The site’s TLS certificate is issued by YR2, uses domain validation (DV), and is valid to 2026-11-06 21:19:05 UTC.
What to Verify Next
Before a material purchase or submission of account information, the prospective counterparty should independently confirm the distillery’s legal trading identity, applicable alcohol-sale authorization, delivery restrictions, returns terms, and payment protections. Contact details should be validated through an independent business record or offline channel rather than relying solely on the website. Account registration should use a unique password, and payment should be made through a method offering transaction dispute protection.
- The homepage provides the business name, product catalogue, age gate, and account workflow for independent cross-checking.
- The About and Contact areas provide the relevant starting points for confirming the operator and its trading details.
- The site uses a WordPress storefront with four observed forms: age verification, login, registration, and password reset.
Summary Verdict
The website has a moderate-trust posture with no observed scam or impersonation contradictions. Its retail presentation and technical continuity are consistent with an apparently legitimate small business, while the available evidence supports only a likely—not independently verified—connection to the real-world operator. Sensitive or high-value interactions therefore warrant proportionate verification rather than automatic reliance.
Infrastructure Integrity
The site is protected by a CDN/WAF arrangement, and the observed address was an edge endpoint rather than an independently exposed origin. This reduces direct origin exposure and can mitigate routine infrastructure abuse, but protective network placement is only a technical safeguard and does not establish the operator’s identity or regulatory status.
Closing Assessment
Ordinary browsing appears proportionate, while purchases and account-sensitive activity should proceed only after the stated business and transaction protections have been independently confirmed.
Written analysis generated 2026-08-21 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
1 finding contributed to this verdict, raised by behaviour in a sandbox.
01 Sensitive Interaction Risk
- The structure of the page changed sharply while it was loading.Behaviour in a sandbox
rule:BEHAV_DOM_DENSITY_SPIKE - The page carried inline scripts written in a style TrustSniffer treats as suspicious.Behaviour in a sandbox
rule:BEHAV_SUSPICIOUS_INLINE_SCRIPTS
Identity verification
| Status | LIKELY |
|---|---|
| Identity score | 73/100 |
| Identity verification confidence | 74% |
- Trusted social count=1
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of oldplum.com.
- The request stayed on oldplum.com. It was not redirected to another domain. Clear
- Registration is published under PDR Ltd. d/b/a PublicDomainRegistry.com. Clear
- DNS for this domain is served by dwhost.net, across 3 name servers. Noted
- The registration is paid up to 2027-03-18. Noted
- The earliest public archive of this site is from 2024-04-23. Clear
- It is hosted on HETZNER-AS, from a server in DE. Noted
Domain intelligence
| Registrar | PDR Ltd. d/b/a PublicDomainRegistry.com |
|---|---|
| Hosting | HETZNER-AS - Hetzner Online GmbH, DE |
| Country | DE |
| Server IP | 157.90.178.221 |
| Name servers | DNS1.DWHOST.NET, DNS2.DWHOST.NET, DNS3.DWHOST.NET |
| SSL issuer | YR2 |
| SSL expiry | 2026-11-06 |
| Domain age | 4.43 years (continuous registration) |
| Domain expiry | 2027-03-18 |
| Archive first seen | 2024-04-23 |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 0 flagged | AbuseIPDB: 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about oldplum.com at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.