Security Review

Is esaac.co legit or a scam?

Our verdict:Safe· 85/100

Legitimate Pakistani Shariah advisory firm with 15-year track record, active business registration, and partnerships with regulated banks and financial regulators.

esaac.coScanned 57m ago
0
Trust score
SAFE
Heuristics 91·MT 82
View density

Analysis Summary

Threat Intelligence
0/92
All engines report clean
Domain Age
Registration date unknown
MT Intelligence
Safe
Low likelihood · 92% confidence
SAFE

No threats detected

All checks passed. This site appears legitimate — but always stay alert for phishing even on trusted domains.

Website Preview

Screenshot of esaac.co
LIVE RENDER
esaac.co

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site.

MT Intelligence

Advanced threat intelligence
MT Security Analyst
Low scam likelihoodengineMT · Guardiantrust82/100
MT AgentLive web researchVisual inspection
0%
Confidence
Our scan found no malware, phishing, or abuse signals — the domain is clean across all antivirus engines and hosting reputation checks. The evidence package confirms ESAAC is a registered Pakistani company founded in 2010, with the CEO serving on Shariah boards for National Bank of Pakistan, Soneri Bank, and the Securities and Exchange Commission of Pakistan (SECP). The firm appears in official Shariah Advisors Registers and has participated in industry forums like the IFN Pakistan Forum 2025. LinkedIn and NBP Funds both independently verify the company's existence, leadership, and client relationships. No scam reports, fraud complaints, or negative reviews were found across web searches. The website displays professional content about Islamic finance services, maintains contact details, and loads standard business infrastructure (SSL, jQuery, Google Analytics) consistent with a legitimate consulting firm.
Full dossier
Analysis complete

Page Content

The site presents itself as a Shariah advisory and Islamic finance consulting firm offering sukuk structuring, Islamic banking conversion, takaful advisory, and fintech compliance. The homepage includes an 'About Us' section, service descriptions, team information, and a login form. Body text is professional and sector-specific, with no scam language, urgency tactics, or credential-harvesting patterns.

Infrastructure

SSL certificate is valid (Let's Encrypt, 53 days to expiry). The hosting IP (139.99.62.46) has zero abuse reports and a clean reputation score. External resources loaded are standard (jQuery, Cloudflare CDN, Google Fonts, Google Analytics, YouTube, LinkedIn, Facebook, X) — no suspicious third-party scripts or trackers. The domain redirects cleanly with no homoglyph or IDN tricks.

Domain History

WHOIS data is unavailable, but the evidence package confirms the company was founded in 2010 and is actively registered in Pakistan. The domain is not indexed in global traffic rankings, which is typical for a B2B professional services firm serving institutional clients rather than consumer traffic.

Web Reputation

Zero detections across our antivirus network. Independent trust-rating aggregators returned no data (N/A), which is common for niche B2B firms. LinkedIn and NBP Funds independently verify the company's legitimacy, leadership, and client relationships. No scam reports, complaints, or negative reviews were found in web searches.

Risk Factors
4
  • Contact email uses external domain (contactus@esaac.com.pk) rather than the site's own domain (esaac.co), which is atypical for a consulting firm but not uncommon in Pakistan where .com.pk is the standard business domain
  • No postal address visible on the homepage, though the company claims offices in Karachi, Dubai, UK, and Canada.
  • Domain not indexed in global traffic rankings, limiting third-party visibility — typical for B2B firms but reduces casual verification.
  • WHOIS data unavailable, preventing independent domain-registration verification.
Positive Signals
5
  • Registered Pakistani company (Ehsan Shariah Advisors & Consultants Private Limited) founded 2010, confirmed via LinkedIn and business registration data.
  • CEO Mufti Ehsan Waquar Ahmad serves as Chairman of Shariah Boards for National Bank of Pakistan, Soneri Bank, SECP, and NBP Funds — verifiable leadership roles at regulated institutions.
  • Firm listed in official SECP Shariah Advisors Register and participated in IFN Pakistan Forum 2025 and Bangladesh Islamic Finance Summit 2025.
  • Clean antivirus scan (0/92 engines flagged), valid SSL certificate, and zero abuse reports on hosting IP.
  • Professional website content, no scam language, no urgency tactics, no credential-harvesting patterns.
AI Recommendation
This site is safe to visit and contact. If you are a financial institution or individual seeking Shariah-compliant advisory services, you can verify the company's credentials through the SECP Shariah Advisors Register, LinkedIn, or by contacting the listed phone number (+92-21-34833944) to confirm current services and engagement terms.
Next-gen fraud intelligence
Evidence-backedCross-checked

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for esaac.co, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Business registration
Active · Pakistan
Site traces back to an actively registered business.
Clone check
Not a clone
No well-known site's layout or branding detected here.
Typosquat check
No look-alike match
The domain doesn't resemble any well-known brand's spelling.
Web mentions
2 positive
Key findings
7 headline facts from open-web research
  • Domain esaac.co is the official website of Ehsan Shariah Advisors & Consultants (ESAAC), a Shariah advisory and Islamic finance consulting firm headquartered in Karachi, Pakistan, founded 2010 with 11-50 employees (LinkedIn).
  • CEO Mufti Ehsan Waquar Ahmad serves as Chairman of Shariah Boards for National Bank of Pakistan (NBP), Soneri Bank, PMRC, NBP Funds, and Member of Shariah Advisory Committee at SECP.
  • Firm has been engaged by institutions including Pak Brunei Investment Company Limited (PBICL) for conversion to Islamic banking and participated in events such as IFN Pakistan Forum 2025 and Bangladesh Islamic Finance Summit 2025.
  • Services promoted include Shariah audit, sukuk structuring, product development, takaful, Islamic banking conversion, fintech/crypto compliance, and education consulting; also offers proprietary Huffaz Pathway Model.
  • No scam reports, fraud complaints, or negative reviews found across web searches including targeted queries for "scam", "fraud", "complaint" combined with domain, company, or founder names.
  • Company maintains LinkedIn presence with regular posts on Islamic finance, website relaunches in multiple languages, and professional networking; listed in official Shariah Advisors Register (as of March 2025).
  • Contact email contactus@esaac.com.pk and phone +92-21-34833944 associated with Karachi address; additional claimed offices in Dubai, UK, Canada.
Positive reviews (2)
Quotes indicating the site is legitimate.
  • LinkedIn Company Pageopen

    "Ehsan Shariah Advisors and Consultants (ESAAC) is a Shariah Advisory consulting company, merging unmatched experience, comprehensive competencies across financial and non-financial industries and education business functions... Founded 2010"

  • NBP Funds / PMRCopen

    "Mufti Ehsan Waquar Ahmad serves as Chairman of the Shariah Board of NBP Funds... At ESAAC (Ehsan Shariah Advisors and Consultants Private Limited), where he is the Chief Executive Officer and has the privilege to work on a project of World "

Business registration
Status: active · Pakistan

Listed as Ehsan Shariah Advisors and Consultants (Private) Limited / ESAAC; founded 2010 per LinkedIn; appears in SECP Shariah Advisors Register and attendee lists for IFN Pakistan Forum 2025; associated with regulated entities like NBP, SECP, PMRC

Research summary
Narrative write-up from our AI analyst, grounded on the facts above

We searched scam-report databases, consumer-review sites, and general web sources for ESAAC, esaac.co, and founder Mufti Ehsan Waquar Ahmad and found zero scam reports, fraud complaints, or negative reviews. The company appears in official Pakistani business registers (SECP Shariah Advisors Register) and is independently verified by regulated financial institutions including National Bank of Pakistan, Soneri Bank, and PMRC. LinkedIn and NBP Funds both confirm the company's existence, leadership, and client relationships. This positive verification, combined with the absence of complaints, is consistent with a legitimate, established consulting firm.

Antivirus Engines

Clean pass · verified
Clean across 92 engines

We cross-check every URL against our antivirus network of 92 malware and blacklist engines. None of them flagged this URL in the last scan.

0Malicious0Suspicious60Harmless92Engines
Clean
Kaspersky
Clean
Bitdefender
Clean
Microsoft
Not in pass
ESET-NOD32
Not in pass
Avira
Not in pass
Sophos
Clean
Fortinet
Clean
Google Safebrowsing
Clean
Emsisoft
Clean

No engine detections. The URL passed every antivirus and blacklist engine we queried in this scan. Stay vigilant — AV coverage is only one signal among many.

Security Scans

Blacklist Check
Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Contact Verification

We fetched the page and looked for real-world contact details. Legitimate businesses almost always publish an email on their own domain, a phone number, and a postal address. Scam shops usually don't.

What We Found
Has contact info, but not on the site's domain
Emails on site's domainNone
Phone numbers+92 213 483 3944
Postal addressNot listed
Linked social profiles4
Signal Summary
Contact details look reasonable
  • No email uses the site's own domain — legitimate shops usually do.
  • No postal address visible on the page.
  • Phone number listed (+92 213 483 3944).
  • Links to 5 social profiles.

Domain & Encryption

Encryption Certificate
StatusValid
ProtocolTLSv1.3
IssuerLet's Encrypt · R13
ExpiresAug 7, 2026 (53d)
Self-signedNo
Hosting & Technology
HostingOVH Hosting, Inc.
Server locationSG
Web serverApache
Platform / CMSWordPress

Redirect Chain

Hops
1
Cross-domain
No
Lookalike
No
Punycode
No
  • 1301http://esaac.co/
  • 2200https://esaac.co/

Server Reputation

Abuse Intelligence
Confidence score0%
Reports on file0
ISPOVH Hosting, Inc.
Usage typeData Center/Web Hosting/Transit

Still, stay alert

No major threat indicators — but a clean scan does not guarantee every page is safe, and phishing emails routinely spoof real domains.

  • Double-check the exact URL in your address bar

    Confirm you are actually on esaac.co and not a lookalike like e-saac.co.com or an IDN homoglyph.

  • Use a password manager

    Password managers only auto-fill on the exact domain they were saved for — they refuse to fill lookalike domains, which is the single best phishing defence.

  • Discuss this site on the forum

    If you have first-hand experience with this site — good or bad — share it with the MalwareTips community.

    Open

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing
Not listedCheck ↗
VirusTotal
Not listedCheck ↗
AbuseIPDB
Not listedCheck ↗

Referenced Domains

Outbound domains this page links to or loads resources from. Each links to its own security scan.

Safety FAQ

Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.

  • Our automated security review found no threat indicators on esaac.co. The site appears legitimate based on the signals we checked, but always stay alert for phishing emails that spoof real domains.
  • esaac.co passed our automated security checks with a trust score of 85/100. No antivirus engines or major blacklists flagged the site at the time of the last scan.
  • Yes. esaac.co presents a valid TLSv1.3 certificate issued by Let's Encrypt · R13, expiring in 53 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
  • No. All 92 antivirus engines in our malware network report esaac.co as clean.
  • No. esaac.co is not currently listed on the major browser blocklist feeds that modern browsers use.
  • esaac.co resolves to an IP operated by OVH Hosting, Inc. in SG (usage type: Data Center/Web Hosting/Transit). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
  • This is a permanent record of the scan run on June 15, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around esaac.co have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.

Final Verdict

0
Trust / 100
Final Verdict·esaac.co
SAFE

ESAAC is a legitimate Shariah advisory and Islamic finance consulting firm founded in 2010 and registered in Pakistan. The company operates transparently with verifiable business registration, established client relationships with regulated financial institutions, and no scam reports or complaints found.

This site is safe to visit and contact. If you are a financial institution or individual seeking Shariah-compliant advisory services, you can verify the company's credentials through the SECP Shariah Advisors Register, LinkedIn, or by contacting the listed phone number (+92-21-34833944) to confirm current services and engagement terms.

AV engines
92
MT passes
2
Net signals
1
Scan another URL
Security review completemalwaretips.com/url-scan
Recently scanned

Other Safe reports

Browse all reports
Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…
Loading comments…
This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.