Zarumar.com is a very new website, registered just over a week ago. For a business that wants to be taken seriously, that's a short track record, and the lack of HTTPS encryption makes it risky to share any personal information. Most legitimate companies, regardless of industry, secure their sites with HTTPS and establish a visible contact method. Here, the homepage doesn't list an email, phone number, or social media accounts, and the site doesn't even load over a secure connection. While the presence of a privacy policy, terms of service, and an about page is a good sign, the combination of a fresh domain and no encryption means there's not enough evidence to trust it with your data. If you're considering using zarumar.com for anything that requires a login or payment, wait until they fix their security and build a track record. For now, treat it as a site you shouldn't rely on.
No — zarumar.com doesn't look safe
In plain English
This site is highly suspicious. It was created only 8 days ago and has no working HTTPS connection, which is a dealbreaker for any trustworthy website today. While it does have some legal pages and an about page, those positives are outweighed by the lack of encryption and the brand new domain.
What you should do now
Don't panic. These steps limit the damage, and the sooner you take them the better.
Don't enter any details
No passwords, card numbers or personal information — even if the site looks professional.
Close the tab
Especially if you got here from an email, text message or social media ad.
Already paid? Call your bank
Contact your bank or card provider right away. They can often stop or reverse a recent payment.
Warn others
Report the site and share this check with anyone who sent you the link.
Where the score comes from
No HTTPS connection is a critical failure for any site in 2026. Even if the site loads over HTTP, the lack of encryption means any data exchanged is exposed. Google hasn't flagged it as malicious yet, but the SSL setup is broken.
The domain is just 8 days old, a classic red flag for fly-by-night operations. While the operator has posted a business disclosure page (Impressum), the extreme youth of the domain makes it hard to verify long-term commitment.
No blacklist history or malware flags, which is neutral. But there's no web archive history and no external reviews, meaning this site has zero track record to assess.
An about page and legal entity disclosure exist, which is good, but the homepage lacks any visible contact information, social media links, or even a favicon. The operator is partly transparent but not open about how to reach them.
Privacy policy, terms of service, and a business disclosure page are all present. For a new site that appears to be a business entity, this meets basic compliance expectations.
The site fails to serve HTTPS properly and lacks basic security headers like those that prevent clickjacking. It's hosted on Incapsula, a CDN with security features, but none are enabled for encrypted traffic.
What we checked
Think this verdict is wrong?
Site owners can request a fresh scan. Scores update automatically as signals change.