Security Review

Is hipobuy.com legit or a scam?

Our verdict:Suspicious· 55/100

China shopping agent with registered business but flagged by antivirus, mixed reviews citing hidden fees and astroturfing tactics.

hipobuy.comScanned 1h ago
0
Trust score
SUSPICIOUS
Heuristics 84·MT 42
Category tags
shopping agentchina e-commerce#Fake Shop#Data Harvester72% MT confidence
Technical red flags (1)

These checks passed — but they don't clear the site. A clean antivirus result, valid SSL, and a calm server only mean it isn't hosting malware; they say nothing about whether the business is real. This verdict is based on the site's conduct and content, not a malware detection.

View density

Analysis Summary

Threat Intelligence
1/92
Engines flagged this URL
Domain Age
1.2 years old
Registered Mar 27, 2025
MT Intelligence
Suspicious
High likelihood · 72% confidence
SUSPICIOUS

Shop shows non-delivery red flags

China shopping agent with registered business but flagged by antivirus, mixed reviews citing hidden fees and astroturfing tactics. Several red flags typical of non-delivery shops are present. Don't pay by crypto or wire, and keep the chargeback window in mind.

Website Preview

Screenshot of hipobuy.com
LIVE RENDER
hipobuy.com

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site.

MT Intelligence

Advanced threat intelligence
MT Security Analyst
High scam likelihoodengineMT · Guardiantrust42/100
MT AgentLive web researchVisual inspection
0%
Confidence
Hipobuy operates as a legitimate-appearing shopping agent with verifiable business registrations (HIPOBUY SARL in Paris, Hong Kong entity) and active mobile apps on major platforms. However, the profile shows several red flags: Gridinsoft flagged the domain as phishing, independent review aggregators assigned very low trust scores citing the malware report and young domain age, and user complaints on multiple platforms describe unexpected shipping surcharges, refund difficulties, and damaged items. Reddit users also documented coordinated fake-account promotion and staged haul posts over a two-month period, suggesting artificial reputation-building. The domain is 444 days old (approximately March 2025), which is relatively young for an e-commerce operator claiming established status. an independent review aggregator shows a 4.4/5 average from ~546 reviews, but the distribution is polarized: enthusiastic endorsements from some users contrast sharply with complaints about hidden costs and service failures. The combination of antivirus detection, documented astroturfing, and fee-related complaints creates moderate-to-high scam likelihood, though the registered business entities and app-store presence suggest operational infrastructure rather than a pure exit scam.
Full dossier
Analysis complete

Page Content

The site presents itself as a China shopping agent facilitating purchases from Taobao, 1688, and Weidian with international shipping. The page title and meta description emphasize speed, style, and service. No contact email, phone, or postal address is visible on the page, which is a significant gap for an e-commerce operator claiming multiple office locations (Paris and Hong Kong). The page loads external analytics (Clarity, Cloudflare Insights) but no scam-family signatures were triggered by our content analysis.

Infrastructure

Domain registered 444 days ago via DNSPod registrar with valid SSL certificate (Google Trust Services, 59 days to expiry). Hosting IP 104.26.4.40 shows zero abuse reports and a clean reputation score. Browser blocklists do not flag the domain. However, Gridinsoft antivirus engine flagged the page as phishing — a single but notable detection among 92 engines scanned.

Domain History

The domain is approximately 15 months old (registered ~March 2025 per evidence package, though WHOIS age field shows 444 days). For a company claiming established operations with registered entities in France (created March 2026 per SIREN record) and Hong Kong, the domain age is relatively young. The WHOIS privacy setting is not enabled, allowing public registration details.

Web Reputation

Independent review aggregators assigned very low trust scores (0–11/100), citing the Gridinsoft malware report, young domain age, and high traffic relative to domain age. an independent review aggregator shows 4.4/5 stars from ~546 reviews with polarized feedback: users praise quality and delivery speed but complain about unexpected shipping fees, extra charges, damaged items, and refund delays. Reddit discussions document accusations of astroturfing — coordinated fake accounts promoting the service with staged hauls for two months, prompting fashion-rep community moderators to change posting rules. YouTube comments report overcharges (€150+ for no purchase completed). Mobile apps on Google Play (3.7 stars, 560 reviews) and Apple App Store show active user engagement but similar fee-related complaints.

Risk Factors
7
  • Gridinsoft antivirus engine flagged the domain as phishing.
  • Independent review aggregators assigned very low trust scores (0–11/100) citing young domain age and high traffic anomalies.
  • Multiple user complaints on an independent review aggregator, YouTube, and Reddit describe unexpected shipping surcharges, extra fees, and refund difficulties.
  • Reddit users documented coordinated fake-account promotion and staged haul posts over a two-month period, indicating astroturfing.
  • No contact email, phone, or postal address visible on the page despite claims of Paris and Hong Kong offices.
  • Domain age (~15 months) is relatively young for a company claiming established multi-country operations.
  • Polarized review distribution suggests potential review manipulation or highly inconsistent service quality.
Positive Signals
5
  • Business registrations verified: HIPOBUY SARL in Paris (SIREN 103053583, active status) and Hong Kong entity (72090932).
  • Active mobile apps on Google Play and Apple App Store with thousands of reviews and 3.7-star rating.
  • an independent review aggregator average of 4.4/5 stars from ~546 reviews with genuine positive feedback on quality and delivery speed.
  • Valid SSL certificate and clean hosting-IP reputation (zero abuse reports).
  • Active community presence: Discord server with 212k members, YouTube hauls, Instagram, TikTok content.
AI Recommendation
Exercise caution before using this service. If you proceed, verify shipping costs upfront in writing, use a payment method with buyer protection (credit card or PayPal), and document all communications. Do not prepay large amounts or use cryptocurrency without independent verification of the transaction. Monitor your account for unexpected charges.
Next-gen fraud intelligence
Evidence-backedCross-checked

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for hipobuy.com, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Domain age
1.2 yrs
Registered Mar 2025
Business registration
Active · France / Hong Kong
Site traces back to an actively registered business.
Clone check
Not a clone
No well-known site's layout or branding detected here.
Typosquat check
No look-alike match
The domain doesn't resemble any well-known brand's spelling.
Web mentions
5 scam reports · 4 positive
Key findings
7 headline facts from open-web research
  • Domain registered approximately March 2025 (age ~15 months per Gridinsoft; user input states 444 days).
  • Operates as a China shopping agent for Taobao, 1688, Weidian with international shipping; has mobile apps on Google Play (3.7 stars, 560 reviews) and Apple App Store.
  • Trustpilot shows 4.4/5 from ~546 reviews with positives on quality, delivery, service but complaints about high/unexpected shipping fees, extra costs, damaged items, and some refund/charge issues.
  • Scamadviser gives very low trust score (0-11/100) citing Gridinsoft malware report, young domain with high traffic (possible artificial), hidden WHOIS.
  • Reddit discussions mixed: some users call it legit alternative to CNFans with cheap shipping and PayPal/crypto options; others accuse of astroturfing with fake hauls and accounts.
  • Company entities registered: HIPOBUY SARL in France (active, March 2026) and Hong Kong entity; page lists Paris and Hong Kong offices.
  • YouTube hauls, tutorials, Instagram, TikTok, and active Discord (212k members) show significant marketing and user-generated content, including warnings about extra fees and shipping.
Scam reports (5)
Direct quotes from public scam databases, forums, and news.
  • Scamadviseropen

    "hipobuy.com has a very low trust score which indicates that there is a strong likelyhood the website is a scam. Be very careful when using this website!"

  • Gridinsoftopen

    "This website has been reported by Gridinsoft as possible malware"

  • Trustpilotopen

    "Its scam DON’T USE IT they grabbed my money and it’s gone forever without nothing"

  • YouTube commentsopen

    "Es una mierda está app. ... al final me cobraron más de 150€ por no comprar nada"

  • Redditopen

    "This agent had multiple fake accounts pimping them all over reddit with fake hauls for 2 months solid, to the point a few rep sites changed rules on posting hauls."

Positive reviews (4)
Quotes indicating the site is legitimate.
  • Trustpilotopen

    "For me Hipobuy is one of the best if not the best agent out there right now. ... never had any problems, i can always recommend it!"

  • Trustpilotopen

    "excellent quality, great prices"

  • Redditopen

    "They are legit."

  • Redditopen

    "they are like the best alternative to Cnfans with much lower handling fee and shipping fee."

Business registration
Status: active · France / Hong Kong

HIPOBUY SARL registered in Paris (SIREN 103053583, created March 2026, address Bureau 2090 37 passage du Ponceau 75002 Paris). Also Hong Kong Jointown Trading Co., Limited (72090932) and app by Southern Times International Trading Co., Ltd.

Research summary
Narrative write-up from our AI analyst, grounded on the facts above

Web research identified 5 scam complaints and 4 positive reviews. Scam reports on independent review sites describe very low trust scores and cite the Gridinsoft malware flag; an independent review aggregator users complain about hidden shipping fees and refund delays; YouTube comments report overcharges; Reddit users documented coordinated fake-account promotion with staged hauls. Positive reviews on an independent review aggregator and Reddit praise the service as a legitimate alternative to competitors, citing good quality and low fees. Business registration data confirms HIPOBUY SARL active in Paris (SIREN 103053583, created March 2026) and a Hong Kong entity (72090932). Mobile apps show 3.7-star ratings with mixed feedback on fees and delivery. The polarized sentiment and documented astroturfing tactics suggest inconsistent service quality and reputation-manipulation efforts.

Antivirus Engines

Detection matrix · live
1 engine flagged this URL

We cross-check every URL against our antivirus network of 92 malware and blacklist engines. Each detection is listed below by engine name — even a single hit is a meaningful signal.

1Malicious0Suspicious59Harmless92Engines
0
of 92
Gridinsoft
Malicious· phishing

1 antivirus engine flagged this URL. Even a single detection is a meaningful signal — treat this site with extra caution and avoid entering credentials, payment info, or downloading any files.

Security Scans

Blacklist Check
Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Contact Verification

We fetched the page and looked for real-world contact details. Legitimate businesses almost always publish an email on their own domain, a phone number, and a postal address. Scam shops usually don't.

What We Found
No clear contact details on the page
Emails on site's domainNone
Phone numbersNone
Postal addressNot listed
Linked social profiles0
Signal Summary
Several contact red flags
  • No contact email found anywhere on the page.
  • No phone number listed on the page.
  • No postal address visible on the page.

Domain & Encryption

Domain History
Age1.2 years old
RegistrarDNSPod, Inc.
RegisteredMar 27, 2025
ExpiresMar 27, 2030
Owner privacyVisible
Encryption Certificate
StatusValid
ProtocolTLSv1.3
IssuerGoogle Trust Services · WE1
ExpiresAug 13, 2026 (59d)
Self-signedNo
Hosting & Technology
HostingCloudflare, Inc.
Server locationUS
Web servercloudflare
PopularityTop 100k worldwide

Redirect Chain

Hops
1
Cross-domain
No
Lookalike
No
Punycode
No
  • 1301http://hipobuy.com/
  • 2200https://hipobuy.com/

Server Reputation

Abuse Intelligence
Confidence score0%
Reports on file0
ISPCloudflare, Inc.
Usage typeContent Delivery Network

Scam-Type Likelihood

1 scam-type patterns detected
Scam-Type Likelihood

1 of 13 categories showed signals

We check every URL against 13 distinct scam categories so the verdict tells you not just how risky the page is, but what kind of risk it carries. Each meter pulls from page signals, web reports, our AI analyst, vision, and the scam-network cluster — not from raw AV labels.

Top match: Fake Shop
Fake Shop
Moderate likelihood
33/100
  • AI analyst tagged this as a fake shop.
  • No phone number or postal address anywhere on the page.
  • Multiple contact / trust-signal red flags on the page.

Fake-shop warning signs

Signals common to non-delivery scam shops were detected on this site.

  • Treat hipobuy.com as unverified

    Do not enter credentials or send money until you have independently verified the business.

  • If you already paid by card or PayPal — start a chargeback

    Contact your bank or card issuer and dispute the charge as "goods not received" or "merchant fraud." PayPal users can open a case in the Resolution Centre. Act within 120 days for card chargebacks in most jurisdictions.

  • Save every piece of evidence

    Screenshots of the checkout, order confirmation emails, any chat transcripts, and the product listing page. Chargeback and fraud reports go faster when you have receipts.

  • Report the shop

    Report to the FTC (reportfraud.ftc.gov), Action Fraud UK, or your local consumer-protection body. Post the URL on the MalwareTips scam forum so other buyers can find it.

    Open

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing
Not listedCheck ↗
VirusTotal
ListedCheck ↗
AbuseIPDB
Not listedCheck ↗

Referenced Domains

Outbound domains this page links to or loads resources from. Each links to its own security scan.

Safety FAQ

Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.

  • Our automated security review marked hipobuy.com as suspicious. Several warning signs were detected; it may still turn out legitimate, but you should verify it through independent channels before trusting it with money or credentials.
  • hipobuy.com currently scores 55/100 on our trust scale. We found enough warning signals to recommend caution. Verify the site through independent channels before entering credentials or money.
  • Yes. hipobuy.com presents a valid TLSv1.3 certificate issued by Google Trust Services · WE1, expiring in 59 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
  • hipobuy.com is 1.2 years old, registered on 3/27/2025 through DNSPod, Inc.. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.
  • 1 out of 92 antivirus engines in our malware network flagged hipobuy.com as malicious or suspicious (1 outright malicious). Even one detection is a meaningful signal.
  • No. hipobuy.com is not currently listed on the major browser blocklist feeds that modern browsers use.
  • hipobuy.com resolves to an IP operated by Cloudflare, Inc. in US (usage type: Content Delivery Network). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
  • Yes. hipobuy.com sits in the global top-100k on Cloudflare Radar, which means it has substantial real-world traffic. That does not automatically make it safe, but established brands almost always rank here and throwaway scam domains almost never do.

Final Verdict

0
Trust / 100
Final Verdict·hipobuy.com
SUSPICIOUS

Hipobuy is a China shopping agent (Taobao, 1688, Weidian) with mixed legitimacy signals: registered business entities in France and Hong Kong, active mobile apps with decent ratings, but flagged by one antivirus engine, multiple user complaints about unexpected fees and refunds, and Reddit accusations of astroturfing with fake promotional accounts.

Exercise caution before using this service. If you proceed, verify shipping costs upfront in writing, use a payment method with buyer protection (credit card or PayPal), and document all communications. Do not prepay large amounts or use cryptocurrency without independent verification of the transaction. Monitor your account for unexpected charges.

AV engines
92
MT passes
2
Net signals
0
Scan another URL
Security review completemalwaretips.com/url-scan
Recently scanned

Other Suspicious reports

Browse all reports
Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…
Loading comments…
This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.