Is kafearabica.com safe?

The sample offer is wired to recurring billing

The site's own copy describes a low-entry offer tied to recurring billing and a cancellation/disclosure obstacle in its legal terms, and promotes a Sample Pack of six 2-oz packs of its top blends. That is the classic subscription-trap shape: a cheap or free-feeling entry point that converts into an ongoing charge.

The subscription terms themselves state that enrolling authorizes Kafe Arabica and its payment providers to automatically charge the selected payment method according to the frequency, price and terms disclosed at signup. Visitors who enroll should expect an automatic recurring charge, not a one-time purchase.

The commercial flow is entirely same-site: Shop, Shop All Coffee, a 10% off first order prompt, an Add/Choose control, Shop Now and Shop Our Tea Collection all point back to kafearabica.com. There is no cross-domain checkout or affiliate redirect in the captured graph, so the risk here is the billing model rather than a hidden third-party order path.

A 28-day-old domain with no phone or postal address

The registrable domain is only 28 days old, so there is no track record of delivery, support or refunds to weigh. The captured page lists no phone number and no operator postal address, which makes it hard for a buyer to identify or reach the business behind the store.

The one supportive contact signal is a support email on the site's own domain, support@kafearabica.com, which is better than a free webmail address but still leaves the operator unnamed. The site also links out to Facebook and Instagram, but those are social profiles rather than verified business disclosures.

Clean technical checks do not clear the billing terms

The browser threat feed returned no threat warning and the saved TLS check found a valid encrypted connection, so there is no evidence of malware, phishing or a hijacked connection on the captured page. One antivirus engine marked the URL as suspicious, but that is an isolated detection across 93 engines with no vendor consensus, and the hosting IP carries an abuse confidence score of 0/100 across 94 saved reports.

The distinction matters: the technical layer looks ordinary for a small Shopify store, while the operator layer — an undisclosed owner, a brand-new domain and auto-rebilling terms — is where the real exposure sits. A clean scan does not make the subscription terms safer.