Is actlocal.network safe? TrustSniffer's low-trust assessment: 33/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

The website at actlocal.network is a recently registered domain whose homepage returns a bare web-server directory listing titled "Index of /". It shows no branding, product, service description, or corporate narrative. Its apparent purpose and business model cannot be determined from the content a visitor sees.

Scam/Impersonation Risk

The site carries a confirmed blacklist hit. Reputation sources aggregated for the domain flag it, including a detection from a major security vendor. The reputation assessment also carries a phishing-type association, and this is the decisive factor in the cautionary posture. The domain is under a year old and its homepage exposes only a raw directory index. That combination is common for infrastructure staged for later use, such as drop sites, payload hosting, or placeholder domains. Automated interaction on the homepage showed no wallet-connection prompts, clipboard manipulation, hidden or externally posting forms, cloaking, or outbound calls to third parties. The page did, however, undergo a large volume of dynamic content changes after interaction, which is unusual for a plain directory listing. No conflicting legal identities or brand impersonation were observed, but the blacklist hit alone is sufficient to treat the domain as high risk. Evidence:

• Homepage: the page title is "Index of /", a default server directory listing with no identifiable organisation, product, or contact route.
• Domain registration: registered 2026-04-08 (~0.55 years old), expiring 2027-04-08, through NICENIC INTERNATIONAL GROUP CO., LIMITED.
• External reputation: the domain appears on an external blacklist, with one malicious and two suspicious detections from security vendors and no clean-reputation offset.
• Homepage behaviour: three of three automated sessions returned stable responses with no third-party network activity, which is a neutral observation rather than a mitigating one.

Regulatory Verification Notes

The site publishes no legal, terms, privacy, about, or licensing pages, and no company name, registration number, or regulatory authorisation appears anywhere on it. Registration data is incomplete on the ownership side, which constitutes ownership opacity and not an identity contradiction. Together with the absence of any governance content, this leaves the operator's real-world identity unconnected to any verifiable entity. No third-party broker or regulatory-database record was matched to this domain. The site's technical hygiene, a valid certificate and an identifiable hosting network, is routine for any domain, including malicious ones, and does not establish legitimacy. Evidence:

• Homepage: no legal entity, licence, registration number, or jurisdiction is disclosed.
• Hosting: the site is served from AS214036 (Ultahost, Inc.), with the IP located in South Africa and allocated through the AFRINIC registry.
• Transport encryption: the TLS certificate was issued by YR1 with domain-validation (DV) only, valid to 2026-12-07 (42 days remaining). This confirms control of the domain but no organisational identity.
• Third-party broker data: no matching broker or regulated-entity profile was found.

What to Verify Next

Any prospective interaction should wait until an independent party has established who operates the domain and why it exists. The site's own content offers no verifiable starting point. Operator identity should be sought through the party that referred the domain, such as the email, message, or document that supplied the link. That party should be asked through a separately known, offline channel whether the domain is genuinely theirs. If the domain was presented as belonging to a named organisation, that organisation's official website, reached independently and not via this domain, should confirm whether it uses this address. Any files or links obtained from this domain should be treated as untrusted and checked in isolation before anything is opened. Evidence:

• Homepage: the directory listing offers no contact or identity information to confirm.
• Domain registration: the domain was created in April 2026, so no long operating history exists to rely on.
• External reputation: the existing blacklist hit means a clean re-scan or delisting should be confirmed before any trust is extended.

Summary Verdict

The available evidence supports an elevated-risk, clearly cautionary posture. A confirmed adverse reputation listing, a very young domain, no identifiable operator, and a homepage with no legitimate business content converge. The few clean technical indicators do not offset them. Apparent legitimacy cannot be inferred from the evidence supplied, and the identity behind the domain remains unknown.

Infrastructure Integrity

The site resolves to a single IP address at a data-centre hosting provider, Ultahost, with no CDN or web application firewall in front of it. The server is therefore reached directly, with no protective edge layer to absorb or filter hostile traffic. No abuse reports were recorded against the hosting address, but this is shared hosting space, so it says little about this particular domain. Infrastructure provides no mitigation against the reputation risk.

Closing Assessment

Interaction should be limited to passive viewing at most. No login, credential entry, payment, or financial transaction should be attempted, and no file should be downloaded or run from this domain, until its operator and purpose are independently established.