Uat.shopee.co.id is a subdomain operated under the Shopee umbrella, one of Southeast Asia's largest online marketplaces. The 'uat' prefix strongly suggests this is a user acceptance testing environment, which developers use to test new features before they go live. This explains some of the quirks in our automated scans, like the robots.txt file blocking crawlers and the slower-than-normal response (bot protection often kicks in for test subdomains). For an e-commerce testing site, the presence of an about page, business disclosure, privacy policy, and terms of service is reassuring — it shows Shopee treats even its test environments with proper documentation. The domain has been around for 8 years, which aligns with Shopee's history. If you're wondering 'is uat.shopee.co.id a scam', the evidence points firmly to no. It's a legitimate, if non-public, part of a very large company. That said, you shouldn't expect to complete purchases here; if you're looking for the real Shopee Indonesia, stick with the main shopee.co.id domain. As with any e-commerce site, always verify you're on the correct domain before entering payment details, but based on all available signals, this subdomain is safe and authentic.
In plain English
Uat.shopee.co.id is a subdomain of Shopee Indonesia, one of the largest e-commerce platforms in the region. The site has strong security, transparency, and compliance signals, and a long web history. It's likely a development or testing environment (the 'uat' prefix is a standard software term), so while it's legitimate, it may not be the main customer-facing store.
Where the score comes from
Strong encryption and security protections. The site uses modern TLS with a valid certificate, sets multiple browser security headers, and has no malware or blacklist flags. This is exactly what you'd expect from a major e-commerce platform's infrastructure.
The site is a subdomain of Shopee, a well-known and established e-commerce company in Southeast Asia. While the WHOIS query for the subdomain didn't return records (normal for subdomains), the parent domain's reputation and the business disclosure page anchor real-world identity. The 'uat' prefix suggests this may be a testing or staging environment, which is common for internal development.
The domain has been online for about 8 years based on Wayback Machine snapshots, which is a strong longevity signal. It appears on no blacklists and Google Web Risk reports no threats. The lack of a Tranco ranking is expected for a subdomain not intended for mainstream search indexing.
The site publishes an about page, business disclosure, contact information, and links to social media. For an e-commerce subdomain, this level of openness is solid. The only minor gap is that the sitemap is misconfigured, which doesn't affect the user-facing transparency.
Privacy policy and terms of service are present. The business disclosure page includes legal entity details as required by EU-style regulations. This is appropriate compliance for an e-commerce site, though a cookie consent notice would be expected in a live production environment (but this may be a test site).
Infrastructure setup is reasonable for a subdomain behind a CDN or bot protection. The slow load time is likely from automated probing being blocked, not real user experience. SPF email authentication is configured, though no other email records exist. The robots.txt blocking all crawlers is unusual for a public site, but for a 'uat' (user acceptance testing) environment it makes sense to prevent indexing. Lack of DNSSEC is a minor point.
What we checked
Run this site? Show your score.
Add a trust badge so visitors can see your live score for themselves.
Get your badge →