Is arhivzajecar.org.rs a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website presents itself as the public informational site of the Regional Historical Archive “Timočka Krajina” in Zaječar, publishing Serbian-language news about exhibitions, book presentations, conferences, archival collections, publications, and institutional services rather than offering financial products or direct commercial transactions.

Scam/Impersonation Risk

The site’s content is consistent with a regional cultural institution: the homepage and archive-news material contain event announcements, bibliographic information, contact details, and institutional sections, with no observed credential solicitation, payment request, login form, or financial offer. However, this benign presentation is contradicted by strong external security detections: the domain is blacklisted by two supplied sources, and multiple security providers, including Fortinet and Sophos, have classified it as malicious. No distinct legal-entity identity contradiction or confirmed phishing or brand-impersonation finding was recorded, but the confirmed blacklist status is sufficient to create a serious risk for sensitive interaction. Evidence:

• The homepage is categorized as institutional archive news and contains exhibition, publication, conference, and archival-service content.
• Page analysis found no login form, hidden sensitive form, wallet connection, or solicitation for funds or credentials.
• External security telemetry recorded 10 malicious detections and a Tier-1 threat finding involving Fortinet and Sophos.
• The domain was first registered on 2012-05-25 and is approximately 14.25 years old; its historical record contains 1,376 snapshots across 15 tracked years from 2012 through 2026.

Regulatory Verification Notes

The site provides an apparent institutional identity and includes contact and organizational information, while the registration record lists ORION TELEKOM d.o.o. as registrar and “Istorisjki arhiv Timočka krajina Zaječar” as the registrant. Identity remains independently unverified. The website does not state a financial or commercial licensing basis, and no license number or licensing authority is presented; given the informational business model, this is primarily a disclosure point rather than evidence of financial solicitation. The external broker-reputation dataset contained no matching broker record. Evidence:

• The site’s navigation includes “About the Archive,” archive history, staff, collections, publishing activity, exhibitions, public procurement, and contact pages.
• No license claim, license number, or licensing authority is presented in the supplied business-model and page-content evidence.
• The domain is registered through ORION TELEKOM d.o.o.; the registration record expires on 2027-05-25.
• The site uses a valid DV TLS certificate issued by YR1, valid until 2026-09-23T12:16:51+00:00.

What to Verify Next

Before any credential, account, payment, file-download, or other sensitive interaction, the institution’s domain ownership should be confirmed through an independently obtained public-sector or archival contact route, rather than relying solely on contact details displayed on the site. Any licensing or official-status question should be checked with the relevant Serbian public registry or supervising authority, and the security detections should be resolved with the organization’s IT or hosting administrator before normal interactive use is restored. Evidence:

• The analyzed pages contain no login or sensitive-data form, supporting a strictly passive review while verification is pending.
• The site is presented as informational and institutional, so independent confirmation of the archive’s official domain and contact channels is the appropriate next control.

Summary Verdict

The overall posture is critical and unsuitable for sensitive interaction. The website’s institutional presentation and long-running historical presence do not outweigh the confirmed external security contradictions, and the real-world operator remains unverified.

Infrastructure Integrity

A CDN/WAF layer was observed, with the visible address presented through edge infrastructure and no origin candidate exposed in the analysis. This provides some protection against direct origin exposure but does not establish legitimacy or offset the external security detections.

Closing Assessment

The appropriate interim posture is passive viewing only; credentials, account access, payments, and other sensitive actions should remain suspended until independent institutional confirmation and resolution of the security findings.