Verdict
angoza.or.tz shows high-risk / scam indicators.
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
| What this site appears to be | Public-facing website for ANGOZA (Association of Non-Governmental Organizations of Zanzibar). Contains contact details, project descriptions, partner information and links to social channels. No forms requesting sensitive credentials or payments detected. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 11 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0 reportsAbuseIPDB; shared hosting inflates this count | Noted |
| Domain age | 4.6 years oldRegistered history | Clear |
| Web archive | Archived since 2013Public history exists | Clear |
| Certificate | Encrypted connectionIssued by YR2 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: 3 to 10 years (registration continuity).
- Public web-archive history exists since 2013.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Security Alert
Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
ANGOZA is a public-facing informational website for the Association of Non-Governmental Organizations of Zanzibar, presenting civil-society projects, advocacy and capacity-building work, partner information, organizational resources, and contact channels rather than commercial products or transactional services.
Scam/Impersonation Risk
A material reputation contradiction is present. External threat intelligence recorded multiple malicious detections and a confirmed blacklist status, including a Tier-1 security-vendor detection, which is decisive for sensitive-interaction risk despite the website’s benign informational presentation. The site itself showed no login form, credential-collection mechanism, payment form, wallet connection, or explicit brand-impersonation indicator; therefore, the available evidence does not establish an identity contradiction or impersonation mechanism on the pages reviewed. Those site-level positives do not neutralize the external reputation findings. Passive review is the only supported use case until the detections and blacklist status are independently resolved.
- The homepage was identified as an informational NGO page and contained no sensitive form, login form, hidden form, or untrusted form destination.
- External scanning recorded 11 malicious detections and 1 suspicious detection for the domain; a Fortinet detection was present.
- The domain was marked as blacklisted by two external sources, while Google Safe Browsing was reported as not malicious.
- Historical records show 68 archive snapshots from 2013-05-13 through 2026-05-14, covering 14 years tracked.
Regulatory Verification Notes
The site’s stated model is a national NGO umbrella organization supported through projects, partners, grants, and donations rather than ordinary commercial sales. Its About, Members, Programme, Resources Library, Media, Blog, and Contact sections provide organizational context, but the supplied pages do not display a license, registration number, or independently verifiable regulatory authority. This is a regulatory and disclosure verification gap, not by itself proof of fraud. The available identity connection is assessed as likely rather than independently verified, and the external reputational findings require the organization’s legal standing and operational control to be confirmed through authoritative channels.
- The homepage title identifies “ANGOZA – Association of NGOs of Zanzibar,” with organizational navigation to About Us, Members, Programme, Resources Library, Media, Blog, and Contact Us.
- The homepage describes projects involving civil-society capacity building, climate justice, human-rights advocacy, COVID-19 awareness, policy engagement, research, and information sharing.
- No license authority or license number was displayed in the supplied business-model and page-content evidence.
- WHOIS records show registration on 2022-01-06, a domain age of 4.62 years, registrar REG-GTGCL, and expiry on 2027-01-05.
What to Verify Next
Before any sensitive interaction, an independent authority should confirm that ANGOZA is a currently registered Zanzibar NGO and that the organization controls the assessed domain and published social channels. Contact details should be confirmed through an offline or independently sourced route rather than relying solely on the website. If donations or grants are contemplated, the receiving legal entity, beneficiary account, and intended project should be matched against independently confirmed organizational records and partner documentation. The external blacklist and malicious detections should also be reviewed with the relevant security providers to determine whether they reflect a false positive, compromised hosting, or an active site-related threat.
- The Contact section publishes a physical-location reference, telephone number, operating hours, and an organizational contact address.
- The site links to Facebook, Twitter, Instagram, and YouTube, creating channels that can be cross-checked independently.
- The homepage identifies project partners and named initiatives, providing specific subjects for external confirmation.
- The site contains no transaction or credential form in the reviewed page set, so verification should precede any interaction conducted outside the observed informational surface.
Summary Verdict
The overall posture is critical and unsuitable for sensitive interaction. Although the website presents a coherent NGO information profile and no malicious page behavior was observed during review, the confirmed external reputation contradiction outweighs those contextual positives. The real-world operator is likely connected to the stated organization but is not independently verified.
Infrastructure Integrity
The site resolves directly to infrastructure hosted by Namecheap, Inc. in the United States, with no CDN detected and one likely origin address exposed. This provides a clearly attributable hosting path but no meaningful protective separation between the public site and its origin. The site uses a Domain Validation TLS certificate issued by YR2; valid transport encryption protects the connection but does not establish organizational legitimacy.
- Hosted on AS22612 (NAMECHEAP-NET — Namecheap, Inc., US), resolved in the United States through ARIN.
- The site resolved to one IP address, 162.0.208.220, with zero detected edge IPs and one likely origin IP.
- TLS certificate validation level is DV; issuer is YR2, valid to 2026-10-21T20:02:05+00:00.
Closing Assessment
Prospective users should restrict activity to passive review and defer account access, credential submission, donations, or other financial interaction until the organization, domain control, and external security findings have been independently cleared.
Written analysis generated 2026-08-22 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
2 findings contributed to this verdict, raised by registration and ownership, analysis engine, external reputation.
01 Governance Risk
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
02 Sensitive Interaction Risk
- The analysis matched a pattern TrustSniffer treats as a direct threat to a visitor.Analysis engine
signal:direct_threat - An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
Identity verification
| Status | LIKELY |
|---|---|
| Identity score | 80/100 |
| Identity verification confidence | 80% |
- Trusted social count=4
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of angoza.or.tz.
- The request stayed on angoza.or.tz. It was not redirected to another domain. Clear
- Registration is published under REG-GTGCL. Clear
- DNS for this domain is served by karibuhost.com, across 2 name servers. Noted
- The registration is paid up to 2027-01-05. Noted
- The earliest public archive of this site is from 2013-05-13. Clear
- It is hosted on NAMECHEAP-NET, from a server in US. Noted
Domain intelligence
| Registrar | REG-GTGCL |
|---|---|
| Hosting | NAMECHEAP-NET - Namecheap, Inc., US |
| Country | US |
| Server IP | 162.0.208.220 |
| Name servers | ns1.karibuhost.com, ns2.karibuhost.com |
| SSL issuer | YR2 |
| SSL expiry | 2026-10-21 |
| Domain age | 4.62 years (continuous registration) |
| Domain expiry | 2027-01-05 |
| Archive first seen | 2013-05-13 |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 11 flagged | AbuseIPDB: 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about angoza.or.tz at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.