Verdict
rupa.co.in is low-trust and potentially risky.
Several risk patterns were present. Do not send money or personal details until you have verified this business another way.
| What this site appears to be | Official corporate site for Rupa & Company Limited: company overview, brands, investor relations, policies, contact information and product catalog links. Includes phone, email and registered office address. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 1 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0 reportsAbuseIPDB; shared hosting inflates this count | Noted |
| Domain age | 23 years oldRegistered history | Clear |
| Web archive | Archived since 2003320 snapshots | Clear |
| Certificate | Encrypted connectionIssued by YE1 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: more than 10 years (registration continuity).
- Public web-archive history exists since 2003.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Overview
The website presents itself as the corporate site of Rupa & Company Limited, an apparel manufacturer and retailer. It provides company information, brand and product catalogues, investor-relations materials, corporate policies, governance information, and customer contact details, indicating an informational and corporate-sales purpose rather than a financial-services business.
Scam/Impersonation Risk
The principal adverse finding is a confirmed blacklist hit, which is a material contradiction to the otherwise established-looking corporate presentation and warrants a clearly cautious posture for sensitive interactions. The site content itself describes Rupa & Company Limited and contains no detected brand-impersonation, phishing, or obvious scam-content indicators; however, the real-world identity connection remains unverified, so the corporate presentation should not be treated as proof that the observed domain is authorized. The external reputation assessment recorded one malicious and two suspicious detections, while Google Safe Browsing reported no malicious result; these signals are not fully uniform, but the confirmed blacklist finding remains decisive.
- The external reputation record shows `external_blacklist: true`, with `vt_malicious: 1` and `vt_suspicious: 2` from the evaluated results.
- The domain registration record shows creation on 2003-05-01 and an age of 23.32 years; registrar: GoDaddy.com, LLC.
- Web-archive records contain 320 snapshots from 2003-10-10 through 2026-05-16, spanning 24 tracked years with a maximum recorded gap of 1 year.
Regulatory Verification Notes
The company, investor-relations, governance, and policy pages provide substantial corporate subject matter and identify Rupa & Company Limited, but the available evidence does not independently verify that the domain is operated or authorized by that entity. No regulated financial-service activity is presented, and no licensing claim or license number is shown in the supplied site materials; this is a transparency point for corporate-identity verification rather than standalone evidence of fraud. The absence of a broker match in the available third-party dataset provides no additional adverse reputational signal, but it is not a legal or regulatory determination.
- The company pages identify Rupa Corporate and provide sections for overview, management, quality, research and development, worldwide reach, brands, and corporate policies.
- Investor-relations pages include financial results, annual reports, stock information, corporate-governance reports, annual returns, and shareholder information.
- Hosting telemetry shows the site served from AS16509, AMAZON-02 — Amazon.com, Inc., US.
- The transport certificate was issued by YE1 at DV validation level and is valid to 2026-09-26T21:45:49+00:00.
What to Verify Next
Before any sensitive interaction, an organization should independently confirm that the domain is authorized by Rupa & Company Limited through a corporate registry or a trusted, separately sourced company channel. Contact details should be cross-checked using an offline or independently obtained route, and any payment, account, or document-submission workflow should be validated against the company’s confirmed official channels rather than relying solely on links presented by the site.
- The contact materials reportedly include a telephone number, email address, and registered-office address suitable for independent cross-checking.
- The homepage provides corporate and investor-relations navigation but no detected login form or sensitive submission form in the captured interaction.
- The site’s corporate materials include governance, annual-return, and shareholder-information sections that can be compared with independently sourced company records.
Summary Verdict
The overall posture is low trust with elevated risk for sensitive interaction. The site has a coherent corporate presentation and substantial historical continuity, but those legitimacy-supporting characteristics do not overcome the confirmed external reputation contradiction or the lack of independent identity verification. Read-only review is the proportionate posture pending authoritative confirmation of domain control.
Infrastructure Integrity
The site is protected by AWS CDN/WAF infrastructure, with the observed edge address 13.126.217.28 associated with AS16509; the origin server was not observable in this analysis. This protection mitigates direct exposure of the origin and supports infrastructure resilience, but it does not establish that the site is legitimate or authorized.
Closing Assessment
Sensitive actions, including credential submission, financial transactions, or document uploads, should be deferred until domain ownership and official authorization have been confirmed through independent sources.
Written analysis generated 2026-08-19 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
1 finding contributed to this verdict, raised by analysis engine.
01 Sensitive Interaction Risk
- The analysis matched a pattern TrustSniffer treats as a direct threat to a visitor.Analysis engine
signal:direct_threat
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of rupa.co.in.
- The request stayed on rupa.co.in. It was not redirected to another domain. Clear
- Registration is published under GoDaddy.com, LLC. Clear
- DNS for this domain is served by domaincontrol.com, across 2 name servers. Noted
- The registration is paid up to 2027-05-01. Noted
- The earliest public archive of this site is from 2003-10-10. Clear
- It is hosted on AMAZON-02, from a server in US. Noted
Domain intelligence
| Registrar | GoDaddy.com, LLC |
|---|---|
| Hosting | AMAZON-02 - Amazon.com, Inc., US |
| Country | US |
| Server IP | 13.126.217.28 |
| Name servers | ns73.domaincontrol.com, ns74.domaincontrol.com |
| SSL issuer | YE1 |
| SSL expiry | 2026-09-26 |
| Domain age | 23.32 years (continuous registration) |
| Domain expiry | 2027-05-01 |
| Archive first seen | 2003-10-10 |
| Archive snapshots | 320 |
| Reputation | VirusTotal: 1 flagged | AbuseIPDB: 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about rupa.co.in at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.