ScamLens
Cached < 6hAnonymous (3/day)

Security Report for bigbasket.pk

ScamLens analyzed bigbasket.pk using 90+ threat intelligence sources and assigned a trust score of 76/100, classifying it as safe.

Trust Score: 76/100

Risk Level: Trusted

There is no strongest risk signal at the moment, but that does not automatically clear the case. Continue by checking the actual transaction scenario, company identity, and communication method.

Site Title
BigBasket.pk | Authentic Skincare &amp; Beauty Products Pakistan
Site Description
Shop authentic CeraVe, The Ordinary, Maybelline and more at BigBasket.pk. Genuine skincare, makeup and beauty products with cash on delivery.
en-PK HTTPS ✓ skincare Pakistanbeauty products online PakistanCeraVe Pakistan
1
Checked 1 times

Quick Answer

There is no strongest risk signal at the moment, but that does not automatically clear the case. Continue by checking the actual transaction scenario, company identity, and communication method.

Positive Signals

  • + Google Safe Browsing: Safe
  • + Valid SSL certificate
  • + HTTPS encryption supported

Concerns

  • - 2 security sources flagged as suspicious

Score Breakdown

Domain Reputation 50
Threat Intelligence 99
17/19 safeSafeBrowsing OK
Technical Security 83
Valid SSLHTTPSHSTS
Community Reputation 50
No community data yet

Was this assessment accurate?

0 say Safe0 say Suspicious
What do you think?
What to do next

bigbasket.pk looks legitimate

No threat feeds have flagged this domain. Use standard online-safety habits.

Confidence:High
  1. Bookmark the official URL
    Scammers often clone legitimate brands at look-alike domains. A saved bookmark protects you from typos.
  2. Watch for unexpected payment requests
    Even legitimate sites can be hijacked. Treat unsolicited 'urgent payment' prompts as suspicious.
  3. Verify HTTPS + the exact spelling
    Confirm the lock icon, and inspect the domain letter-by-letter before entering passwords or card details.
Cross-check with independent scanners

Trust but verify — open this domain on unrelated security services and compare the verdict.

Sign in to run the AI risk analysis

The threat-intelligence signals below are available to everyone. The plain-language AI risk summary is generated on demand for signed-in users — sign in (free) to run it for this domain.

Threat-intelligence sources

Checked across 26 sources — 2 flagged this domain

Show source breakdown
  • safe_browsing clean
  • urlhaus clean
  • cloudflare_radar clean
  • cert_transparency clean
  • alienvault_otx clean
  • virustotal flagged
  • ipqs clean
  • abuseipdb clean
  • securitytrails clean
  • phishdestroy clean
  • threatfox clean
  • shodan_internetdb clean
  • phishtank clean
  • urlscan clean
  • rdap clean
  • maltiverse clean
  • dns_security clean
  • wanted_domains clean
  • darkweb clean
  • maltrail flagged
  • openphish clean
  • scam_blocklist clean
  • crypto_scam_feed clean
  • phishing_army clean
  • hagezi_tif clean
  • red_flag_domains clean

ScamLens aggregates real-time signals from 90+ commercial and open-source threat-intelligence providers including Google Safe Browsing, VirusTotal, PhishTank, URLhaus, ThreatFox, Cloudflare Radar, OTX, IPQS, GoPlus, Honeypot.is, and more. A flagged signal is evidence; the absence of flags is not proof of safety. Use the signals below alongside community reports to decide.

Advanced Scan

Comprehensive data lookup across premium sources

$2.99one-time payment
  • Website history verification
  • Detailed WHOIS information
  • Reverse WHOIS association
  • Traffic rank analysis
  • Company registration check
Recommended

AI Deep Investigation

Cross-check the story, claims, and supporting evidence before you decide

$4.99one-time payment
  • Everything in Advanced Scan
  • AI website content analysis
  • AI cross-reference verification
  • Claim authenticity validation
  • Detailed report with evidence
Most Thorough

Comprehensive Investigation

Full-spectrum investigation with company deep search & social intelligence

$14.99one-time payment
  • Everything in Deep Investigation
  • AI company background search
  • Social media intelligence
  • Detailed suspicious point analysis
  • Event timeline & entity connections

This analysis is for informational purposes only and does not constitute a legal determination.

Security Sources

Google Safe Browsing
Safe
Cloudflare Radar
Safe
URLhaus (abuse.ch) Confidence: Medium
Not Listed
Certificate Transparency Confidence: Low
Not Listed
AlienVault OTX Confidence: Low
Not Listed
VirusTotal Confidence: Medium
Unsafe
IPQualityScore Confidence: Low
Not Listed
AbuseIPDB Confidence: Medium
Not Listed
SecurityTrails Confidence: Low
Not Listed
PhishDestroy Confidence: Medium
Not Listed
ThreatFox (abuse.ch) Confidence: Low
Not Listed
Shodan InternetDB Confidence: Low
Not Listed
PhishTank Confidence: Low
Not Listed
URLScan.io Confidence: Medium
Not Listed
RDAP Domain Registration Confidence: Low
Not Listed
Maltiverse Confidence: Medium
Not Listed
DNS Security Confidence: Medium
Not Listed
Law Enforcement Confidence: Low
Not Listed
darkweb Confidence: Low
Not Listed
Maltrail (stamparm) Confidence: Medium
Unsafe
OpenPhish Confidence: Low
Not Listed
Scam Blocklist (Jarelllama) Confidence: Low
Not Listed
Crypto Scam Feed Confidence: Low
Not Listed
Phishing Army Confidence: Low
Not Listed
HaGeZi Threat Intelligence Confidence: Low
Not Listed
Red Flag Domains Confidence: Low
Not Listed

Domain Information

DNSSEC
Disabled

SSL/TLS Certificate

Issuer
C=US, O=Let's Encrypt, CN=YE1
Valid From
July 29, 2026
Valid To
October 27, 2026
Status
Valid
SAN List
code-step.bigbasket.pk

Server Information

IP Address
72.60.211.109
Hosting Provider
Hostinger MY
ASN
AS47583 Hostinger International Limited
Server Location
Kuala Lumpur, Malaysia

Related Intelligence

Technical Details (DNS / Headers / Subdomains)

DNS Records

Email Security

SPF Configured DMARC Configured
Type Value
A 72.60.211.109
MX 5 mx1.hostinger.com
MX 10 mx2.hostinger.com
NS artemis.dns-parking.com
NS hermes.dns-parking.com
TXT v=spf1 include:_spf.mail.hostinger.com ~all
TXT google-site-verification=f3M6bWtZf0IL4mHWtgnV7Iq2jOmc609_hMNhh1NtYsA
TXT ahrefs-site-verification_e358d8c590a143482190ea49de76944849307f19b3018549d482aac513a767ba
TXT v=spf1 a mx include:_spf.elasticemail.com ~all

HTTP Security Headers

4/6
Strict-Transport-Security Present

max-age=31536000; includeSubDomains; preload

Content-Security-Policy Missing
X-Frame-Options Present

SAMEORIGIN

X-Content-Type-Options Present

nosniff

Referrer-Policy Present

same-origin

Permissions-Policy Missing

Channels / Subdomains

35 subdomains found
Subdomain Title
code-step.bigbasket.pk Default page
codestep.bigbasket.pk Default page
email.mail.bigbasket.pk -
apax-trade.bigbasket.pk -
blog.bigbasket.pk Skincare Blog — Tips, Guides &amp; Reviews | BigBasket.pk
affiliate-program.bigbasket.pk BigBasket.pk Affiliate Program
bycripto.bigbasket.pk -
bot.bigbasket.pk -
www.affiliate-program.bigbasket.pk -
testnew.bigbasket.pk BigBasket - Original Cosmetics, Skin Care Products in Pakistan 2025
newnext.bigbasket.pk -
www.bigbasket.pk -
b2b.bigbasket.pk -
www.b2b.bigbasket.pk -
1stake.bigbasket.pk -
ojs.bigbasket.pk -
crypto.bigbasket.pk -
next.bigbasket.pk -
affiliate.bigbasket.pk -
bigbaskettest.bigbasket.pk -
stock.bigbasket.pk -
portal-test.bigbasket.pk -
portal.bigbasket.pk -
crm.bigbasket.pk -
mail.bigbasket.pk -
bigbasket.bigbasket.pk -
www.bigbasket.bigbasket.pk -
autodiscover.bigbasket.pk -
cpanel.bigbasket.pk -
cpcalendars.bigbasket.pk -
cpcontacts.bigbasket.pk -
webdisk.bigbasket.pk -
webmail.bigbasket.pk -
whm.bigbasket.pk -
merch.bigbasket.pk -

Community Reports

Log in to report and share your experience

...

The results are based on multiple third-party data sources and AI models. False positives or negatives may occur. This report should not be used as the sole basis for any decision. Please verify with additional sources.

Continue with the actual scenario check

If this is a store, investment platform, or recovery service, do not rely on the domain alone. Continue with the matching scenario guide.

Open a scenario guide

If you already paid, logged in, or downloaded files, move into the action plan immediately.

Related Security Guides

Learn more about how to protect yourself from this type of threat.

Understanding this threat

FAQ

Is bigbasket.pk safe to visit?

bigbasket.pk received a trust score of 76/100 from ScamLens, based on analysis of 30+ threat intelligence sources. No significant threats were detected. The site appears safe and trustworthy.

Was bigbasket.pk flagged by any threat databases?

bigbasket.pk was flagged by 2 out of 30+ threat intelligence sources. Specifically flagged by: virustotal, maltrail. The detected threat categories include: general threat.

How old is bigbasket.pk?

Registration date information for bigbasket.pk is not publicly available through WHOIS records, which can itself be a risk indicator.

Does bigbasket.pk use HTTPS and have a valid SSL certificate?

bigbasket.pk uses an SSL certificate issued by C=US, O=Let's Encrypt, CN=YE1, valid until October 27, 2026. The certificate is from a free provider (Let's Encrypt/ZeroSSL), which is common but does not validate the organization's identity.

What security headers does bigbasket.pk implement?

bigbasket.pk is missing important security headers: Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Strict-Transport-Security, Referrer-Policy, Permissions-Policy. Missing security headers can leave visitors vulnerable to cross-site scripting (XSS) and other web-based attacks.

What does the ScamLens community think about bigbasket.pk?

No community votes or reports have been submitted for bigbasket.pk yet. You can be the first to share your experience.

Where is bigbasket.pk hosted?

bigbasket.pk is hosted by Hostinger MY in Kuala Lumpur, Malaysia (ASN: ASAS47583 Hostinger International Limited).

What should I do about bigbasket.pk?

Based on our analysis, bigbasket.pk appears safe. You can proceed with normal caution. Always verify URLs manually and avoid clicking suspicious links.

Is this report useful?

Use this report to remind others to verify the shopping, investment, or support scenario instead of treating it as full clearance.

Forward to your parents — they deserve to browse safely too.

About this analysis

This report is generated from real-time data across 90+ threat intelligence sources, combined with AI analysis and community feedback.

Learn about our scoring methodology | Last analyzed: August 15, 2026

All Hostinger MY domains