Security Review

Is lightinthebox.com legit or a scam?

Our verdict:Suspicious· 55/100

Established NYSE-traded retailer with 19-year history, but carries persistent complaints about quality, sizing mismatches, and restrictive refund policies.

lightinthebox.comScanned 3h ago
0
Trust score
SUSPICIOUS
Heuristics 99·MT 48
Category tags
online retailfashion & apparel#Fake Shop#Dropshipping72% MT confidence
Warning signals (1)

These checks passed — but they don't clear the site. A clean antivirus result, valid SSL, and a calm server only mean it isn't hosting malware; they say nothing about whether the business is real. This verdict is based on the site's conduct and content, not a malware detection.

View density

Analysis Summary

Threat Intelligence
0/92
All engines report clean
Domain Age
20 years old
Registered Oct 2, 2006
MT Intelligence
Suspicious
Moderate likelihood · 72% confidence
SUSPICIOUS

Shop shows non-delivery red flags

Established NYSE-traded retailer with 19-year history, but carries persistent complaints about quality, sizing mismatches, and restrictive refund policies. Several red flags typical of non-delivery shops are present. Don't pay by crypto or wire, and keep the chargeback window in mind.

Website Preview

Screenshot of lightinthebox.com
LIVE RENDER
lightinthebox.com

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site.

MT Intelligence

Advanced threat intelligence
MT Security Analyst
Moderate scam likelihoodengineMT · Guardiantrust48/100
MT AgentLive web researchVisual inspection
0%
Confidence
LightInTheBox is a real, publicly traded company (NYSE: LITB since 2013) with a 19-year domain history and active business registration in Singapore and China. Our antivirus network and browser blocklists show no malware or phishing signals. However, the evidence package reveals a stark reputation split: independent review aggregators report mostly positive feedback on navigation and pricing, but the Better Business Bureau rates the company F (not accredited) with a pattern of unresolved complaints. Customer reports across Reddit, YouTube, BBB, and other platforms consistently cite low-quality products, sizing that doesn't match photos, materials that smell or feel cheap, and refund policies that are difficult to navigate. A 2013 class-action lawsuit alleged financial misrepresentation post-IPO. The company operates as a budget Chinese dropshipper, which explains the quality gap between product photos and what arrives. This is not a phishing scam or malware vector — it's a legitimate business with a documented history of customer dissatisfaction.
Full dossier
Analysis complete

Page Content

The homepage displays a functional e-commerce storefront with product categories (clothing, shoes, home goods), currency/language selectors, and a shopping cart. No login form, countdown timer, or push-notification spam detected. The page loads JavaScript frameworks and external analytics (Google Tag Manager, app store links). No contact email, phone, or postal address is visible on the page itself.

Infrastructure

Domain registered 7,195 days ago (~19.7 years); registrar is Amazon Registrar, Inc. SSL certificate is valid (GoDaddy issuer, 47 days to expiry). Hosting IP 148.153.88.162 has zero abuse reports and a clean reputation score. One redirect hop detected (cross-domain). Our antivirus network reports 0/92 engines flagging malicious or suspicious content; browser blocklists are clean.

Domain History

The domain aligns with the company's founding in 2007 and NYSE IPO in 2013. Business registration confirms active status in Cayman Islands, China, and Singapore. The company is a legitimate cross-border e-commerce operator, not a parked or abandoned domain.

Web Reputation

Mixed but heavily negative customer sentiment. Independent review aggregators show an independent review aggregator 4.3/5 (510k+ reviews, mostly positive on ease of use and pricing) and ConsumerAffairs 3.9/5 (5.5k reviews, described as legitimate but with caveats on returns and shipping). However, the Better Business Bureau rates the company F (not accredited) with a pattern of complaints. Customer reports on Reddit, YouTube, BBB, and other platforms cite poor product quality, sizing mismatches, materials that don't match photos, and difficult refund processes. A 2013 class-action lawsuit alleged post-IPO financial misrepresentation.

Risk Factors
6
  • Better Business Bureau F rating (not accredited) with pattern of unresolved complaints.
  • Persistent customer complaints across multiple platforms about low product quality, sizing mismatches, and materials not matching photos.
  • Restrictive refund and return policy; customers report difficulty obtaining refunds.
  • 2013 class-action lawsuit alleging financial misrepresentation post-IPO.
  • Operates as a budget Chinese cross-border retailer; significant quality gap between product photos and delivered items.
  • No visible contact information (email, phone, address) on the homepage.
Positive Signals
5
  • Legitimate public company traded on NYSE (LITB) since 2013; founded 2007.
  • Domain registered 19.7 years ago; long operational history.
  • Clean antivirus and browser blocklist scans; no malware or phishing detected.
  • Hosting IP has zero abuse reports and clean reputation.
  • an independent review aggregator and ConsumerAffairs confirm company legitimacy and describe positive user experience with navigation and pricing.
AI Recommendation
LightInTheBox is a real, publicly traded company — not a phishing scam or malware vector. However, if you choose to order, be aware of the documented pattern of quality issues, sizing mismatches, and difficult refunds. Read customer reviews carefully, order only items with detailed photos and realistic descriptions, and understand the return policy before checkout. Consider whether the price savin
Next-gen fraud intelligence
Evidence-backedCross-checked

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for lightinthebox.com, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Domain age
19 yrs
Registered Oct 2006
Business registration
Active · Cayman Islands / China / Singapore
Site traces back to an actively registered business.
Clone check
Not a clone
No well-known site's layout or branding detected here.
Typosquat check
No look-alike match
The domain doesn't resemble any well-known brand's spelling.
Web mentions
5 scam reports · 4 complaints · 4 positive
Key findings
7 headline facts from open-web research
  • Domain registered ~19.7 years ago (7195 days); company founded 2007, public on NYSE:LITB since 2013 IPO.
  • Trustpilot 4.3/5 from 510k+ reviews (claimed/paid profile); AI summary notes mostly positive on navigation/prices but complaints on shipping costs, quality, refunds.
  • BBB rating F, not accredited, 4 unresolved complaints, pattern of complaints alert; customer reviews average ~1.06/5 citing poor quality, sizing, returns.
  • ConsumerAffairs 3.9/5 from 5.5k reviews; described as legitimate NYSE-traded company but with strict returns and high shipping.
  • Frequent customer complaints (Reddit, YouTube, Facebook, BBB) about low-quality products (cheap material, small sizes, smell, not as pictured), long shipping, difficult/impossible refunds/returns.
  • 2013 class-action lawsuit (US) alleging misrepresentation of financial prospects post-IPO; company is China-based cross-border retailer of apparel/lifestyle goods.
  • Wikipedia and investor filings confirm active public company with recent 2026 financial reports; mixed reputation as budget Chinese online retailer.
Scam reports (5)
Direct quotes from public scam databases, forums, and news.
  • BBB.orgopen

    "FRAUD ALERT! Stay away. ... They are a REMOVED (not representative of all Chinese companies) that sells complete JUNK and does not allow ANY RETURNS."

  • YouTube commentsopen

    "Scammy website, awful quality - do not order! ... What a scam company. I ordered a dress and what I received was so different from the quality and fabric shown in the website photo."

  • Yahoo/Creatorsopen

    "However, Light in the Box has a Better Business Bureau F rating and is not BBB accredited. So, in that sense, they are not "legit.""

  • DiscountDressShop.comopen

    "LightintheBox has been added to our Do Not Buy list. They may be illegally selling one or more dress lines using the manufacturers pictures"

  • Reddit r/FrugalFemaleFashionopen

    "Lightinbox is a scam. The product quality is poor and super cheap. Their refund policy sucks. They are dishonest and disingenuous. Buyer beware!"

Positive reviews (4)
Quotes indicating the site is legitimate.
  • Trustpilotopen

    "Considering 68,890 reviews, reviewers overwhelmingly had a great experience with this company. Customers find the website easy to navigate, with a wide selection of products and reasonable prices"

  • ConsumerAffairsopen

    "Is LightInTheBox legit? Yes, founded in 2007, LightInTheBox is a legitimate company that trades on the New York Stock Exchange and serves customers worldwide."

  • Reddit r/Scamsopen

    "Yes. I've occasionally bought from them over the years (going back to at least 2016 2012) and never had issues with either quality or delivery."

  • MyWifeQuitHerJob.comopen

    "Overall, LightInTheBox is a legitimate business, and if you place an order, you will receive your goods as agreed with a reasonable refund policy."

Business registration
Status: active · Cayman Islands / China / Singapore

Public company (NYSE: LITB), founded 2007, headquartered in Singapore with offices in Beijing, Shanghai; operates as cross-border e-commerce from China; BBB lists US entity in Portland, OR (F rating, not accredited, pattern of complaints)

Research summary
Narrative write-up from our AI analyst, grounded on the facts above

Our research found a polarized reputation. The Better Business Bureau rates LightInTheBox F (not accredited) with a pattern of unresolved complaints. Customer reports on Reddit, YouTube, BBB, and other platforms consistently cite poor product quality, sizing that doesn't match photos, materials that feel cheap or smell, and refund policies that are difficult to navigate. A 2013 class-action lawsuit alleged financial misrepresentation post-IPO. However, independent review aggregators (an independent review aggregator, ConsumerAffairs) confirm the company is legitimate, NYSE-traded since 2013, and describe mostly positive feedback on website navigation and pricing — with caveats about shipping costs and returns. The company operates as a budget Chinese cross-border retailer, which explains the quality gap between product photos and delivered items.

Antivirus Engines

Clean pass · verified
Clean across 92 engines

We cross-check every URL against our antivirus network of 92 malware and blacklist engines. None of them flagged this URL in the last scan.

0Malicious0Suspicious62Harmless92Engines
Clean
Kaspersky
Clean
Bitdefender
Clean
Microsoft
Not in pass
ESET-NOD32
Not in pass
Avira
Not in pass
Sophos
Clean
Fortinet
Clean
Google Safebrowsing
Clean
Emsisoft
Clean

No engine detections. The URL passed every antivirus and blacklist engine we queried in this scan. Stay vigilant — AV coverage is only one signal among many.

Security Scans

Blacklist Check
Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Contact Verification

We fetched the page and looked for real-world contact details. Legitimate businesses almost always publish an email on their own domain, a phone number, and a postal address. Scam shops usually don't.

What We Found
No clear contact details on the page
Emails on site's domainNone
Phone numbersNone
Postal addressNot listed
Linked social profiles0
Signal Summary
Several contact red flags
  • No contact email found anywhere on the page.
  • No phone number listed on the page.
  • No postal address visible on the page.

Domain & Encryption

Domain History
Age20 years old
RegistrarAmazon Registrar, Inc.
RegisteredOct 2, 2006
ExpiresOct 2, 2030
Owner privacyVisible
Encryption Certificate
StatusValid
ProtocolTLSv1.3
IssuerGoDaddy.com, Inc. · Go Daddy Secure Certificate Authority - G2
ExpiresAug 1, 2026 (47d)
Self-signedNo
Hosting & Technology
HostingCDS Global Cloud Co., Ltd
Server locationUS
PopularityTop 100k worldwide

Redirect Chain

Hops
1
Cross-domain
Yes
Lookalike
No
Punycode
No
  • 1301http://lightinthebox.com/
  • 2200https://www.lightinthebox.com/cross-domain

Server Reputation

Abuse Intelligence
Confidence score0%
Reports on file0
ISPCDS Global Cloud Co., Ltd
Usage typeData Center/Web Hosting/Transit

Scam-Type Likelihood

1 scam-type patterns detected
Scam-Type Likelihood

1 of 13 categories showed signals

We check every URL against 13 distinct scam categories so the verdict tells you not just how risky the page is, but what kind of risk it carries. Each meter pulls from page signals, web reports, our AI analyst, vision, and the scam-network cluster — not from raw AV labels.

Top match: Fake Shop
Fake Shop
High likelihood
63/100
  • AI analyst tagged this as a fake shop.
  • No phone number or postal address anywhere on the page.
  • Multiple contact / trust-signal red flags on the page.
  • E-commerce page with multiple non-delivery red flags (missing real contact info, very young domain, crypto-only checkout, or fake-urgency).

Fake-shop warning signs

Signals common to non-delivery scam shops were detected on this site.

  • Treat lightinthebox.com as unverified

    Do not enter credentials or send money until you have independently verified the business.

  • If you already paid by card or PayPal — start a chargeback

    Contact your bank or card issuer and dispute the charge as "goods not received" or "merchant fraud." PayPal users can open a case in the Resolution Centre. Act within 120 days for card chargebacks in most jurisdictions.

  • Save every piece of evidence

    Screenshots of the checkout, order confirmation emails, any chat transcripts, and the product listing page. Chargeback and fraud reports go faster when you have receipts.

  • Report the shop

    Report to the FTC (reportfraud.ftc.gov), Action Fraud UK, or your local consumer-protection body. Post the URL on the MalwareTips scam forum so other buyers can find it.

    Open

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing
Not listedCheck ↗
VirusTotal
Not listedCheck ↗
AbuseIPDB
Not listedCheck ↗

Referenced Domains

Outbound domains this page links to or loads resources from. Each links to its own security scan.

Safety FAQ

Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.

  • Our automated security review marked lightinthebox.com as suspicious. Several warning signs were detected; it may still turn out legitimate, but you should verify it through independent channels before trusting it with money or credentials.
  • lightinthebox.com currently scores 55/100 on our trust scale. We found enough warning signals to recommend caution. Verify the site through independent channels before entering credentials or money.
  • Yes. lightinthebox.com presents a valid TLSv1.3 certificate issued by GoDaddy.com, Inc. · Go Daddy Secure Certificate Authority - G2, expiring in 47 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
  • lightinthebox.com is 19.7 years old, registered on 10/2/2006 through Amazon Registrar, Inc.. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.
  • No. All 92 antivirus engines in our malware network report lightinthebox.com as clean.
  • No. lightinthebox.com is not currently listed on the major browser blocklist feeds that modern browsers use.
  • lightinthebox.com resolves to an IP operated by CDS Global Cloud Co., Ltd in US (usage type: Data Center/Web Hosting/Transit). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
  • Yes. lightinthebox.com sits in the global top-100k on Cloudflare Radar, which means it has substantial real-world traffic. That does not automatically make it safe, but established brands almost always rank here and throwaway scam domains almost never do.

Final Verdict

0
Trust / 100
Final Verdict·lightinthebox.com
SUSPICIOUS

LightInTheBox is a legitimate but controversial Chinese cross-border retailer founded in 2007 and publicly traded on NYSE. However, it carries a pattern of customer complaints about poor product quality, misleading photos, difficult returns, and high shipping costs — warranting caution before purchase.

LightInTheBox is a real, publicly traded company — not a phishing scam or malware vector. However, if you choose to order, be aware of the documented pattern of quality issues, sizing mismatches, and difficult refunds. Read customer reviews carefully, order only items with detailed photos and realistic descriptions, and understand the return policy before checkout. Consider whether the price savin

AV engines
92
MT passes
2
Net signals
0
Scan another URL
Security review completemalwaretips.com/url-scan
Recently scanned

Other Suspicious reports

Browse all reports
Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…
Loading comments…
This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.