Security Review

Is hepsiburada.com legit or a scam?

Our verdict:Safe· 95/100

Hepsiburada is a major, NASDAQ-listed Turkish e-commerce platform operating since 2000 with high traffic and a valid security infrastructure.

hepsiburada.comScanned 10h ago
0
Trust score
SAFE
Heuristics 100·MT 92
View density

Analysis Summary

Threat Intelligence
0/92
All engines report clean
Domain Age
26 years old
Registered Jul 4, 2000
MT Intelligence
Safe
Low likelihood · 95% confidence
SAFE

No threats detected

All checks passed. This site appears legitimate — but always stay alert for phishing even on trusted domains.

Website Preview

Screenshot of hepsiburada.com
LIVE RENDER
hepsiburada.com

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site.

MT Intelligence

Advanced threat intelligence
MT Security Analyst
Low scam likelihoodengineMT · Guardiantrust92/100
MT AgentLive web researchVisual inspection
0%
Confidence
The domain has been registered for over 25 years and is operated by a publicly traded company listed on the NASDAQ. Our analysis shows a clean bill of health across all major antivirus engines and browser blocklists. While there are numerous consumer complaints on review platforms, these are typical for a marketplace of this scale and generally concern shipping delays or third-party seller disputes rather than platform-wide fraud. The site maintains a high global traffic rank and uses high-level EV SSL encryption. We found no evidence of malicious intent or phishing on the primary domain.
Full dossier
Analysis complete

Page Content

The site is a comprehensive e-commerce marketplace offering millions of products across dozens of categories. It features a sophisticated infrastructure including its own payment gateway and logistics network.

Infrastructure

The technical setup is robust, utilizing dedicated hosting with a clean IP reputation and no history of abuse reports. The presence of an Extended Validation (EV) SSL certificate confirms the legal identity of the operator.

Domain History

Registered in 2000, the domain is highly established. It has a long-standing reputation in the Turkish market and has transitioned from a private entity to a major public corporation.

Web Reputation

The platform maintains millions of active users and high ratings on official mobile app stores. While independent review aggregators show a high volume of customer service complaints, the company actively responds to these issues, which is characteristic of a legitimate large-scale retailer.
Risk Factors
3
  • High volume of consumer complaints regarding third-party marketplace sellers.
  • Reports of counterfeit items being sold by unauthorized vendors on the platform.
  • Frequent impersonation of the brand by scammers on Telegram and WhatsApp for 'task' scams.
Positive Signals
5
  • Publicly traded company listed on the NASDAQ (HEPS).
  • Domain age exceeds 25 years with a consistent ownership history.
  • Zero detections across 92 antivirus engines and major blocklists.
  • Valid Extended Validation (EV) SSL certificate issued to the legal business entity.
  • Top-tier global traffic ranking indicating a massive, active user base.
AI Recommendation
You can safely use this site for shopping. As with any large marketplace, check individual seller ratings before purchasing and avoid any 'Hepsiburada' offers found on Telegram or WhatsApp.
Next-gen fraud intelligence
Evidence-backedCross-checked

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for hepsiburada.com, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Domain age
26 yrs
Registered Jul 2000
Business registration
Active · Turkey
Site traces back to an actively registered business.
Clone check
Not a clone
No well-known site's layout or branding detected here.
Typosquat check
No look-alike match
The domain doesn't resemble any well-known brand's spelling.
Web mentions
5 scam reports · 76626 complaints · 4 positive
Key findings
7 headline facts from open-web research
  • hepsiburada.com is the official website of D-MARKET Electronic Services & Trading A.Ş., a leading Turkish e-commerce platform founded in 2000 and listed on NASDAQ (ticker: HEPS) since 2021.
  • Company is headquartered in Istanbul, Turkey; offers millions of products across 30+ categories with its own logistics (Hepsiexpress) and payment solutions.
  • Sikayetvar shows a low score of 38/100 based on 76,626 total complaints, primarily about returns, refunds, delivery delays, missing items, and some fake/counterfeit products from third-party sellers.
  • Trustpilot rating is low (around 1.5/5 from ~119 reviews) with complaints about fake digital codes, untrustworthy suppliers, and poor customer service.
  • Google Play app has 4.5 stars from 1.95M reviews; Apple App Store 4.7/5 from 17K ratings, with many users praising the shopping experience.
  • Scamadviser deems it "Very Likely Safe" and "legit and safe to use" despite noting some negative reviews and hidden WHOIS.
  • Many complaints reference third-party sellers or scammers impersonating the brand (e.g., fake "task earn" campaigns on Telegram/WhatsApp using the Hepsiburada name); official platform responds to 100% of complaints on Sikayetvar in the last
Scam reports (5)
Direct quotes from public scam databases, forums, and news.
  • Trustpilotopen

    "Hepsiburada sold me 4 fake Steam codes from the seller TEKNOMSTORE - REFUND MY MONEY !!!!!!!!!!!!!!!"

  • Trustpilotopen

    "There are fake suppliers on this site."

  • Sikayetvaropen

    "Hepsiburada'dan Sahte Güneş Spreyi ve Yetkisiz Yönlendirme Şikayetim"

  • Sikayetvaropen

    "Telegram üzerinden Hepsiburada isimli sahte görev kampanyası ve 6.250 TL kaybı"

  • Reviews.ioopen

    "Avoid Hepsiburada if you want a good service! Terrible company. If I could give the company a zero I would do."

Positive reviews (4)
Quotes indicating the site is legitimate.
  • Google Playopen

    "Very good shop with a lot good quality goods"

  • App Storeopen

    "Overall one of the best online shopping app in Turkey for iPhones."

  • Technopat Forumopen

    "Güvenilir. 8 yıldır alışveriş yapıyorum."

  • Sikayetvaropen

    "Son 1 yılda şikayetleri cevaplama oranı %100"

Business registration
Status: active · Turkey

Legal name D-MARKET Elektronik Hizmetler ve Ticaret A.Ş. (NASDAQ: HEPS). Founded 2000 in Istanbul by Hanzade Doğan. Public company listed on NASDAQ since 2021; majority stake acquired by Kaspi.kz in 2025.

Research summary
Narrative write-up from our AI analyst, grounded on the facts above
We found that Hepsiburada is the official platform of D-MARKET Electronic Services & Trading A.Ş. and has been active since 2000. While consumer review sites like an independent review aggregator and Sikayetvar contain many negative reports regarding delivery and third-party sellers, these are balanced by millions of positive ratings on the Google Play and Apple App Stores. The company is a recognized legal entity in Turkey and is listed on the NASDAQ stock exchange.

Antivirus Engines

Clean pass · verified
Clean across 92 engines

We cross-check every URL against our antivirus network of 92 malware and blacklist engines. None of them flagged this URL in the last scan.

0Malicious0Suspicious61Harmless92Engines
Clean
Kaspersky
Clean
Bitdefender
Clean
Microsoft
Not in pass
ESET-NOD32
Not in pass
Avira
Not in pass
Sophos
Clean
Fortinet
Clean
Google Safebrowsing
Clean
Emsisoft
Clean

No engine detections. The URL passed every antivirus and blacklist engine we queried in this scan. Stay vigilant — AV coverage is only one signal among many.

Security Scans

Blacklist Check
Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Domain & Encryption

Domain History
Age26 years old
RegistrarNetwork Solutions, LLC
RegisteredJul 4, 2000
ExpiresJul 4, 2027
Owner privacyVisible
Encryption Certificate
StatusValid
ProtocolTLSv1.2
IssuerDigiCert Inc · DigiCert EV RSA CA G2
ExpiresNov 21, 2026 (145d)
Self-signedNo
Hosting & Technology
HostingTurk Telekomunikasyon Anonim Sirketi
Server locationTR
PopularityTop 100k worldwide

Redirect Chain

Hops
2
Cross-domain
Yes
Lookalike
No
Punycode
No
  • 1301http://hepsiburada.com/
  • 2301https://hepsiburada.com/
  • 3403https://www.hepsiburada.com/cross-domain

Server Reputation

Abuse Intelligence
Confidence score0%
Reports on file0
ISPTurk Telekomunikasyon Anonim Sirketi
Usage typeFixed Line ISP

Still, stay alert

No major threat indicators — but a clean scan does not guarantee every page is safe, and phishing emails routinely spoof real domains.

  • Double-check the exact URL in your address bar

    Confirm you are actually on hepsiburada.com and not a lookalike like h-epsiburada.com.com or an IDN homoglyph.

  • Use a password manager

    Password managers only auto-fill on the exact domain they were saved for — they refuse to fill lookalike domains, which is the single best phishing defence.

  • Discuss this site on the forum

    If you have first-hand experience with this site — good or bad — share it with the MalwareTips community.

    Open

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing
Not listedCheck ↗
VirusTotal
Not listedCheck ↗
AbuseIPDB
Not listedCheck ↗

Safety FAQ

Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.

  • Our automated security review found no threat indicators on hepsiburada.com. The site appears legitimate based on the signals we checked, but always stay alert for phishing emails that spoof real domains.
  • hepsiburada.com passed our automated security checks with a trust score of 95/100. No antivirus engines or major blacklists flagged the site at the time of the last scan.
  • Yes. hepsiburada.com presents a valid TLSv1.2 certificate issued by DigiCert Inc · DigiCert EV RSA CA G2, expiring in 145 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
  • hepsiburada.com is 26.0 years old, registered on 7/4/2000 through Network Solutions, LLC. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.
  • No. All 92 antivirus engines in our malware network report hepsiburada.com as clean.
  • No. hepsiburada.com is not currently listed on the major browser blocklist feeds that modern browsers use.
  • hepsiburada.com resolves to an IP operated by Turk Telekomunikasyon Anonim Sirketi in TR (usage type: Fixed Line ISP). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
  • Yes. hepsiburada.com sits in the global top-100k on Cloudflare Radar, which means it has substantial real-world traffic. That does not automatically make it safe, but established brands almost always rank here and throwaway scam domains almost never do.

Final Verdict

0
Trust / 100
Final Verdict·hepsiburada.com
SAFE

This is the official website for Hepsiburada, one of Turkey's largest and most established e-commerce platforms. It is a legitimate, publicly traded company, though users should exercise standard caution with third-party marketplace sellers. You can safely browse and shop here.

You can safely use this site for shopping. As with any large marketplace, check individual seller ratings before purchasing and avoid any 'Hepsiburada' offers found on Telegram or WhatsApp.

AV engines
92
MT passes
2
Net signals
0
Scan another URL
Security review completemalwaretips.com/url-scan
Recently scanned

Other Safe reports

Browse all reports
Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…
Loading comments…
This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.