Verdict
altatweer.ly shows high-risk / scam indicators.
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
| What this site appears to be | A default web hosting activation page (LibyanSpider / altatweer.ly) indicating the site is active and pointing users to the client area and knowledge base. No sign-in forms, payment requests, or suspicious content present. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 9 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0 reportsAbuseIPDB; shared hosting inflates this count | Noted |
| Domain age | 7 months oldMost scam domains are under a year old | Watch |
| Web archive | Archived since 2010Public history exists | Clear |
| Certificate | Encrypted connectionIssued by YR1 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- Public web-archive history exists since 2010.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Security Alert
Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
This website is a default web-hosting activation page for altatweer.ly, branded “LibyanSpider,” presenting an active-site notice, links toward a customer client area, and a knowledge base containing more than 200 tutorials; its apparent business model is to provide web-hosting services and manage customer subscriptions and accounts.
Scam/Impersonation Risk
The site presents no page-level phishing form, payment request, deceptive prompt, or suspected brand impersonation, and its visible content is limited to a standard hosting placeholder. However, this benign presentation does not resolve the decisive external risk: the domain is recorded as blacklisted and has received multiple malicious threat detections, including a Tier-1 detection. The resulting contradiction between the simple homepage presentation and the external threat intelligence is material, and sensitive interaction should be treated as unsafe until the domain’s status is independently resolved. No separate identity contradiction between legal-entity names was observed.
- The homepage is a default LibyanSpider hosting page with no login form, payment form, hidden form, or suspicious redirect behavior.
- External reputation telemetry records 9 malicious detections and 1 suspicious detection, with a confirmed blacklist classification.
- The registration record states creation on 2026-01-17 and an age of 0.59 years; the archive-reconciled domain age is 16.10130047912389 years, creating a provenance discrepancy requiring explanation.
- The web archive contains 2 snapshots spanning 2010–2021, with 12 years tracked.
Regulatory Verification Notes
The available page does not identify a legal entity, licensing basis, registration number, or applicable service terms; this is a disclosure gap rather than proof of misconduct. The real-world operator identity remains unverified. A domain-validated TLS certificate confirms encrypted transport, but it does not establish ownership, authorization, or regulatory standing. No matching third-party broker profile was identified in the supplied reputational context.
- The homepage identifies the service brand as LibyanSpider and directs customers to a client area and knowledge base, but does not provide a corporate registration or licensing disclosure.
- The site is hosted on AS329263, operated by “Libyan Spider for IT LTD. - Libyan Spider for IT LTD., LY,” in Libya.
- The site’s TLS certificate is issued by YR1, uses DV validation, and is valid to 2026-10-14T07:39:51+00:00.
What to Verify Next
Before any sensitive interaction, an institution should independently confirm that the named hosting operator is authorized to provide the advertised service and that the domain is formally controlled by that operator. Any client-area address, account-recovery route, billing instruction, or support channel should be obtained through an independently sourced route rather than relying solely on the page. Licensing or registration status should be checked with the relevant Libyan authority if the intended service requires it, and the blacklist detections should be investigated with the responsible security teams before access is permitted.
- The homepage provides only a service-activation notice and navigation toward customer support resources, leaving the operator’s legal and regulatory status unresolved.
- The page contains no sensitive forms or payment requests, so the current capture does not demonstrate safe handling of credentials or transactions in the client area.
- The available external intelligence identifies a confirmed blacklist condition that requires resolution before sensitive access is approved.
Summary Verdict
The overall posture is critical trust risk. The site’s visible content is a low-complexity hosting placeholder, but the confirmed external threat detections and unresolved provenance and identity issues outweigh the benign page behavior. The available evidence does not support treating the domain as suitable for sensitive interaction.
Infrastructure Integrity
The site resolves directly to one likely origin address, 102.213.180.7, with no CDN or WAF vendor detected and no edge IPs identified. It is hosted by Libyan Spider for IT LTD. on AS329263 in Libya; this direct-hosting arrangement provides limited infrastructure-layer mitigation and does not offset the external reputation findings.
Closing Assessment
Access should remain limited to passive inspection until independent operator, service-authority, contact-channel, and threat-status checks are completed; client-area login, credential submission, and financial activity should not proceed in the interim.
Written analysis generated 2026-08-20 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
2 findings contributed to this verdict, raised by registration and ownership, analysis engine, external reputation.
01 Governance Risk
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
02 Sensitive Interaction Risk
- The analysis matched a pattern TrustSniffer treats as a direct threat to a visitor.Analysis engine
signal:direct_threat - An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of altatweer.ly.
- The request stayed on altatweer.ly. It was not redirected to another domain. Clear
- Registration is published under Libyan Spider Network (loc). Clear
- DNS for this domain is served by libyanspider.net, across 2 name servers. Noted
- The registration is paid up to 2027-01-17. Noted
- The earliest public archive of this site is from 2010-07-13. Clear
- It is hosted on Libyan Spider for IT LTD., from a server in LY. Noted
Domain intelligence
| Registrar | Libyan Spider Network (loc) |
|---|---|
| Hosting | Libyan Spider for IT LTD. - Libyan Spider for IT LTD., LY |
| Country | LY |
| Server IP | 102.213.180.7 |
| Name servers | ns2.web06.libyanspider.net, ns1.web06.libyanspider.net |
| SSL issuer | YR1 |
| SSL expiry | 2026-10-14 |
| Domain age | 0.59 years (continuous registration) |
| Domain expiry | 2027-01-17 |
| Archive first seen | 2010-07-13 |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 9 flagged | AbuseIPDB: 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about altatweer.ly at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.