Is ca.vawoo.com safe?
http://ca.vawoo.com/
Checked on
How we checked
Coverage: complete · 4 of 4 applicable core capabilities
- Antivirus (60 of 93 engines answered): completed
- Google Safe Browsing: completed
- page reading: completed
- page capture: completed
- domain records: completed
- web research: completed
Vawoo is a long-established vape marketplace with minor antivirus flags but no confirmed scam mechanics
ca.vawoo.com is the Canadian storefront of Vawoo, an online marketplace for vape products where individual suppliers list and ship goods. The domain is over 13 years old and the site publishes a support email on its own domain and a UK phone number, which are normal signs of a real trading business. The main negative is a small antivirus flag: one engine calls the site malicious and one suspicious out of 93, while the browser threat feed reports no warning. No fake-shop kit, refund trap, withdrawal wall, or forced advertising flow was found in the evidence. The score reflects a real but imperfectly verified marketplace rather than a confirmed scam.
Loading saved screenshot
Preparing the saved page preview.
Where this site sits
- Dangerous1–20
- High Risk21–44
- Moderate Risk45–69
- Low Risk70–84
- Safe85–100
The score combines saved evidence strength and analysis quality. Coverage is reported separately.
Why 72/100
Low Risk covers scores 70–84. 1 finding pulled the score down; 4 pushed it up.
What pulled the score down
- Moderate1 independent antivirus family reported an adverse result.
What pushed the score up
- SupportsThe registrable domain is 5001 days old, indicating a long-standing operation.
- SupportsThe browser threat feed returned no threat warning for the site.
- SupportsThe site publishes a support email on its own domain and a UK phone number.
- SupportsThe saved TLS check found a valid encrypted connection.
No points per finding are stored for this report: our analysis weighed all findings together to set the score. Each finding shows its saved severity instead (Decisive, Strong, Moderate or Minor). Community reviews never change the Safety Score.
01 · Investigation Brief
Investigation Brief
ca.vawoo.com is the Canadian storefront of Vawoo, an online marketplace for vape products where individual suppliers list and ship goods. The domain is over 13 years old and the site publishes a support email on its own domain and a UK phone number, which are normal signs of a real trading business. The main negative is a small antivirus flag: one engine calls the site malicious and one suspicious out of 93, while the browser threat feed reports no warning. No fake-shop kit, refund trap, withdrawal wall, or forced advertising flow was found in the evidence. The score reflects a real but imperfectly verified marketplace rather than a confirmed scam.
A vape marketplace, not a single-brand shop
The site's own policy text defines a supplier as any vape company registered on the website in order to ship vape products, which confirms Vawoo is a multi-seller marketplace rather than one merchant. Product listings such as the Uwell Caliburn G3 Pod Kit and the SMOK Nord 5 Kit are typical vape hardware items sold through that marketplace model.
Because each supplier ships its own orders, delivery times and service quality can vary between sellers. That is a structural feature of the marketplace model, not evidence of fraud, and the evidence reviewed does not show a specific non-delivery or refund-blocking case.
Minor antivirus flags, no confirmed operator abuse
The saved scan shows one malicious and one suspicious detection across 93 engines, attributed to Netcraft and Gridinsoft. That is a low-level flag, not a broad consensus, and the browser threat feed returned no threat warning. The saved TLS check also found a valid encrypted connection, so traffic to the site is protected in transit.
On the operator side, the domain is 5001 days old, which is a strong longevity signal, and the site publishes a support email on its own domain plus a UK phone number. These are normal contact details for a real business. The evidence does not show a fake-shop kit, a refund trap, a subscription trap, or a withdrawal wall, so there is no confirmed operator abuse to report.
Standard e-commerce flow with social and newsletter links
The commercial path is ordinary: product pages with add-to-cart functionality, a newsletter or account signup form, and links out to Facebook, Instagram, and Twitter. The cross-site links go to those social platforms, not to an unrelated checkout or payment domain, so there is no cross-domain order path to flag.
A country-selection notice appears on the page, which is a normal localization prompt for a marketplace serving multiple regions. Nothing in the reviewed evidence shows forced redirects, popups, or deceptive download controls.
Why the score is 72
The saved checks found no material threat, but the evidence was not strong enough for the highest Safe tier. Coverage remains separate so missing sources cannot be mistaken for clean results.
02 · Security Evidence
Security evidence
Antivirus Engines
2/ 93
detectionsFresh result
2 engines flagged this URL
Every saved adverse engine is listed below. The full provider matrix remains available for audit.
- Malicious
- 1
- Suspicious
- 1
- Total
- 93
| Engine | Finding |
|---|---|
| NetcraftMalicious | malicious |
| GridinsoftSuspicious | suspicious |
All 93 engine results
- Netcraft - Malicious
- Gridinsoft - Suspicious
- 0xSI_f33d - Unrated
- Abusix - Clean
- Acronis - Clean
- ADMINUSLabs - Clean
- AILabs (MONITORAPP) - Clean
- AlienVault - Clean
- alphaMountain.ai - Unrated
- AlphaSOC - Unrated
- Antiy-AVL - Clean
- ArcSight Threat Intelligence - Unrated
- AutoShun - Unrated
- Bfore.Ai PreCrime - Unrated
- BitDefender - Clean
- Bkav - Unrated
- BlockList - Clean
- Blueliv - Clean
- Certego - Clean
- ChainPatrol - Unrated
- Chong Lua Dao - Clean
- CINS Army - Clean
- CRDF - Clean
- Criminal IP - Unrated
- CSIS Security Group - Unrated
- CTX AI - Clean
- Cyan - Unrated
- Cyble - Clean
- CyRadar - Clean
- desenmascara.me - Clean
- DNS8 - Unrated
- Dr.Web - Clean
- EmergingThreats - Clean
- Emsisoft - Clean
- Ermes - Unrated
- ESET - Clean
- ESTsecurity - Clean
- Forcepoint ThreatSeeker - Clean
- Fortinet - Clean
- Fortra - Unrated
- G-Data - Clean
- GCP Abuse Intelligence - Unrated
- Google Safe Browsing - Clean
- GreenSnow - Clean
- GreyNoise - Unrated
- Guardpot - Unrated
- Heimdal Security - Clean
- Hunt.io Intelligence - Unrated
- IPsum - Clean
- Juniper Networks - Clean
- K7AntiVirus - Unrated
- Kaspersky - Clean
- LevelBlue - Clean
- Lionic - Clean
- Lumu - Unrated
- Malwared - Clean
- MalwarePatrol - Clean
- MalwareURL - Unrated
- Mimecast - Unrated
- OpenPhish - Clean
- Orcapot - Unrated
- PhishFort - Unrated
- Phishing Database - Clean
- Phishtank - Clean
- PREBYTES - Clean
- PrecisionSec - Unrated
- Quick Heal - Clean
- Quttera - Clean
- Rising - Clean
- SafeToOpen - Unrated
- Sangfor - Clean
- Sansec eComscan - Unrated
- Scantitan - Clean
- SCUMWARE.org - Clean
- Seclookup - Clean
- Snort IP sample list - Unrated
- SOCRadar - Unrated
- Sophos - Clean
- StopForumSpam - Clean
- Sucuri SiteCheck - Clean
- Synthient - Unrated
- ThreatHive - Clean
- URLhaus - Clean
- URLQuery - Unrated
- Viettel Threat Intelligence - Clean
- VIPRE - Unrated
- ViriBack - Clean
- VX Vault - Clean
- Webroot - Clean
- Xcitium Verdict Cloud - Clean
- Yandex Safebrowsing - Clean
- ZeroCERT - Clean
- ZeroFox - Unrated
How security vendors categorise this site
- BitDefendertobacco
- Forcepoint ThreatSeekerentertainment
- Googleshopping
Each vendor’s own label for the site, saved with the antivirus result. Labels are separate from the engine verdicts above and can disagree with each other.
Security Scans
Checked against the browser threat feeds available to this scan — no hit.
What we observed
Loading saved screenshot
Preparing the saved page preview.
Visual context from the captured page
Country chosen doesn't correspond to your IP. Please choose the correct country in the upper menu
What the captured page showed
1 observation- 01
Country chosen doesn't correspond to your IP. Please choose the correct country in the upper menu
What the page says about itself
What the site says about itself, quoted from the pages we read. The site wrote these words; they are not our findings.
- Page title
Online Vaping Shop in Canada | E-cigarettes and e-liquids with delivery to Canada ✅
- Meta description
E-cigarettes online boutique Vawoo in Canada. ✓ Wide range of e-cigs ✓ Most our clients are based in: Toronto, Montreal, Calgary, Ottawa, Edmonton, Mississauga. ✓
Pages we read
- Main page/enRead
- About page/en/about_usRead
- Terms/en/termsRead
- Refund / returns policy/en/refund_policyRead
03 · Investigation Story
Investigation story
What the site claims
Online Vaping Shop in Canada | E-cigarettes and e-liquids with delivery to Canada ✅
What we observed
The page content was captured and checked alongside 60 antivirus results.
What independent research found
The search completed without a material external warning or corroborating report.
What remains unverified
The checks completed, but ownership, business claims, and future site behavior can still change after this snapshot.
What kind of site and risk is this?
Threat category
No threat category confirmed
Service and business model
Shop
Observed behavior
Evidence behind this classification
- 01One malicious and one suspicious detection were reported across 93 engines, attributed to Netcraft and Gridinsoft.
- 02The registrable domain is 5001 days old, indicating a long-standing operation.
- 03The site publishes a support email on its own domain and a UK phone number.
Web research findings
Independent findings for ca.vawoo.com, including public complaints, named review sources, registration records, and look-alike-domain evidence. A missing result is shown as unverified, never converted into a clean bill of health.
No independently sourced scam reports or credibility records were found for ca.vawoo.com. That is common for new or low-traffic sites and does not clear the site.
Reputation Sources
How this domain rates across independent threat-intelligence and blocklist providers.
04 · Domain & Infrastructure
Domain & infrastructure
The plumbing behind the site — who registered it, how it’s encrypted, where it’s hosted, and where it links out. A valid certificate or a calm server doesn’t mean the business is honest — scam sites pass these checks too. Use this to corroborate the verdict, not to overturn it.
Infrastructure map
How the saved page connected to the wider web.
- Domainca.vawoo.com
- Redirects toca.vawoo.com
- Hosted byCloudflare, Inc.
- Referencesporjs.com · google-analytics.com
Domain Timeline
- Feb 10, 2013Domain registered
First appeared in WHOIS records — 13 years old when this review was saved.
- Oct 22, 2026Saved security review — Rated Low Risk
This saved scan found no material threat, but the evidence was not strong enough for the highest Safe tier.
ca.vawoo.com has operated for years and this review found no material threat — a long track record, though it is never a guarantee on its own.
Contact Verification
Saved contact details can help identify the operator. Their presence supports traceability; it does not prove the business is trustworthy.
- Contact email on the site's own domain (support@vawoo.com).
- Phone number listed (+44 2036702131).
- Links to 3 social profiles.
Domain & Encryption
Cloudflare DNS is used by legitimate and scam sites alike, so it does not identify who runs the site.
Certificate issued for vawoo.com.
A shared Cloudflare address answers for many sites, so it is not the site's own server and says nothing about who runs it.
Analytics and ads
- Google Analytics
- Google Tag Manager
Scripts, fonts and CDNs
- Google Fonts
- jsDelivr
Payment providers the page loads
None seen among the outside domains we saved.
Read from the first 20 outside domains the page loads and the shop platform it uses; the web server and platform rows are under Hosting & Technology. A payment script on the page does not prove the shop accepts that method at checkout, or that you are protected.
Redirect Chain
- 1301http://ca.vawoo.com/
- 2302https://ca.vawoo.com/
- 3200https://ca.vawoo.com/en
Server Reputation
Referenced Domains
Outbound domains this page links to or loads resources from. Each links to its own security scan.
05 · Evidence Ledger
Evidence ledger
- Antiviruscomplete
- Browser threat feedcomplete
- Page contentcomplete
- Analysiscomplete
- Visual evidencecomplete
The conclusion is supported by the evidence saved with this report.
Technical threat
suspiciousMalware, phishing, credential theft and hostile infrastructure.
1 independent antivirus family reported an adverse result.
Operator / customer risk
unknownComplaints, withdrawals, business conduct and commercial traps.
No confirmed evidence in this dimension.
Source coverage and freshness
Status shows whether usable evidence was saved; finding shows what that evidence observed.
| Source | Result | Completion | Finding | Freshness |
|---|---|---|---|---|
| Antivirus | 2 of 93 engines flagged | Completed | Adverse | fresh · analysed Oct 22, 2026 |
| Browser protection | No browser threat-list match | Completed | No adverse finding | this scan · Oct 22, 2026 |
| Page content | Page fetched · HTTP 200 | Completed | No adverse finding | this scan · Oct 22, 2026 |
| Visual evidence | 1 visible observation saved with the page capture | Completed | No adverse finding | this scan · Oct 22, 2026 |
| Independent research | The search completed without a material external finding | Completed | No adverse finding | this scan · Oct 22, 2026 |
- Antivirus
- Result2 of 93 engines flagged
- CompletionCompletedFindingAdverse
- Freshnessfresh · analysed Oct 22, 2026
- Browser protection
- ResultNo browser threat-list match
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Oct 22, 2026
- Page content
- ResultPage fetched · HTTP 200
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Oct 22, 2026
- Visual evidence
- Result1 visible observation saved with the page capture
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Oct 22, 2026
- Independent research
- ResultThe search completed without a material external finding
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Oct 22, 2026
07 · Safety FAQ
Safety FAQ
Common questions, answered directly from the scan data above — so the answers reflect the saved verdict and evidence in this report.
Is ca.vawoo.com a scam or is it safe?
Is ca.vawoo.com safe to use?
Has ca.vawoo.com been flagged by antivirus engines?
Is ca.vawoo.com on any phishing or malware blacklists?
How old is the ca.vawoo.com domain?
Does ca.vawoo.com have a valid SSL certificate?
Where is ca.vawoo.com hosted?
How often is the ca.vawoo.com report updated?
08 · Final Verdict
Final verdict
Vawoo is a long-established vape marketplace with minor antivirus flags but no confirmed scam mechanics
ca.vawoo.com is the Canadian storefront of Vawoo, an online marketplace for vape products where individual suppliers list and ship goods. The domain is over 13 years old and the site publishes a support email on its own domain and a UK phone number, which are normal signs of a real trading business. The main negative is a small antivirus flag: one engine calls the site malicious and one suspicious out of 93, while the browser threat feed reports no warning. No fake-shop kit, refund trap, withdrawal wall, or forced advertising flow was found in the evidence. The score reflects a real but imperfectly verified marketplace rather than a confirmed scam.
09 · Community
Community
Are you the owner of ca.vawoo.com?Verify and reply