Verdict
assalipur.ma is low-trust and potentially risky.
Several risk patterns were present. Do not send money or personal details until you have verified this business another way.
| What this site appears to be | Public directory index exposing WordPress-related files; no forms, monetization, or social links detected. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 3 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 1 report; shared hosting inflates reports | Clear |
| Domain age | 8.5 years oldRegistered history | Clear |
| Web archive | Archived since 2020Public history exists | Clear |
| Certificate | Encrypted connectionIssued by YR2 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: 3 to 10 years (registration continuity).
- Public web-archive history exists since 2020.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Overview
The website at assalipur.ma currently presents a public directory index rather than a functioning commercial or service platform, exposing WordPress-related files such as `wp-blog-header.php`, `wp-confiq.php`, and `wp-cron.php`; its apparent purpose and operating model are not established from the available page.
Scam/Impersonation Risk
Contradictory external reputation signals materially elevate the risk of sensitive interaction. The domain is reported as blacklisted by two external sources, with three malicious and one suspicious detections recorded. No brand impersonation, conflicting legal identity, phishing form, credential form, or payment request was observed on the captured page; however, the confirmed blacklist status remains a direct contradiction that is not offset by the page’s lack of active monetization. One abuse report also applies to the hosting IP, but that signal is specifically attributed to shared provider infrastructure, carries zero confidence, and is therefore not treated as site-specific evidence. The exposed directory itself represents a security and evidence-quality concern because it reveals WordPress file paths without presenting a credible business context.
- The homepage is titled “Index of /” and exposes WordPress-related files, including `wp-blog-header.php`, `wp-confiq.php`, and `wp-cron.php`.
- External reputation checks recorded 3 malicious detections, 1 suspicious detection, and a confirmed blacklist status.
- The domain was registered on 2018-02-15 and is approximately 8.52 years old.
- Historical coverage records 67 archive snapshots spanning 2020–2025, with 6 years tracked.
Regulatory Verification Notes
The available site presentation does not provide a discernible legal or licensing disclosure, operator description, terms framework, or regulated-business claim. This is a verification gap rather than, by itself, proof of misconduct; nevertheless, the absence of an identifiable operating model is significant where the site’s legal status cannot be connected to a real-world entity. A third-party broker-reputation check produced no name match, but that result is contextual only and does not establish licensing, authorization, or regulatory standing. The transport certificate confirms encrypted connectivity, not operator identity or regulatory legitimacy.
- The captured homepage contains only a directory listing and no visible company, license, registration, or regulated-service disclosure.
- WHOIS identifies INMOROCCO SOLUTIONS as registrar and lists Hmida Iyamniouene as the registrant.
- The site’s TLS certificate is issued by YR2, uses Domain Validation (DV), and is valid to 2026-11-16T01:28:38+00:00.
What to Verify Next
Before any sensitive interaction, an institution should independently identify the intended operator, confirm any claimed authorization directly with the relevant official registry, and obtain current legal, privacy, terms, and dispute-resolution documentation through an authenticated business channel. The exposed directory should also be reported to the hosting provider or site administrator for remediation, and any future request for credentials, payment, or financial data should be treated as requiring a separate security review. Official contact channels should be confirmed through an independent, offline route rather than relying solely on information presented by the site.
- The homepage provides no visible business-purpose, operator, or compliance documentation from which authorization can be confirmed.
- The observed page is a filesystem index rather than a normal business landing page, so the site’s intended service remains unconfirmed.
- Browser analysis recorded no login form, sensitive form, external POST, wallet connection, or credential-collection mechanism during the captured interaction.
Summary Verdict
The site should be treated as an unverified, low-trust endpoint with elevated risk for sensitive interaction. Its apparent legitimacy is not established, and the available evidence supports restricting use to non-sensitive observation while the external reputation contradiction and operator identity remain unresolved.
Infrastructure Integrity
The site resolves directly to infrastructure operated by O2SWITCH - O2SWITCH SAS in France, without a detected CDN or WAF intermediary. This direct hosting arrangement provides limited protective separation between the site and its origin and should be regarded only as an infrastructure characteristic, not as evidence of legitimacy.
- Hosted on AS50474 (O2SWITCH - O2SWITCH SAS, FR), registered through RIPE NCC, with one resolved IP and no detected edge IP.
- The resolved server IP is 109.234.161.36 in France.
Closing Assessment
Sensitive actions, including login, credential submission, payment, or financial activity, should not proceed unless the operator and purpose are independently validated and the external reputation contradiction has been satisfactorily explained.
Written analysis generated 2026-08-22 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
2 findings contributed to this verdict, raised by registration and ownership, analysis engine.
01 Governance Risk
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
02 Sensitive Interaction Risk
- The analysis matched a pattern TrustSniffer treats as a direct threat to a visitor.Analysis engine
signal:direct_threat
Signals weighed against the site
- AbuseIPDB: 1 report on hosting IP 109.234.161.36 (O2SWITCH SAS, Data Center/Web Hosting/Transit), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of assalipur.ma.
- The request stayed on assalipur.ma. It was not redirected to another domain. Clear
- Registration is published under INMOROCCO SOLUTIONS. Clear
- DNS for this domain is served by o2switch.net, across 2 name servers. Noted
- The registration is paid up to 2027-02-15. Noted
- The earliest public archive of this site is from 2020-09-26. Clear
- It is hosted on O2SWITCH, from a server in FR. Noted
Domain intelligence
| Registrar | INMOROCCO SOLUTIONS |
|---|---|
| Hosting | O2SWITCH - O2SWITCH SAS, FR |
| Country | FR |
| Server IP | 109.234.161.36 |
| Name servers | ns2.o2switch.net, ns1.o2switch.net |
| SSL issuer | YR2 |
| SSL expiry | 2026-11-16 |
| Domain age | 8.52 years (continuous registration) |
| Domain expiry | 2027-02-15 |
| Archive first seen | 2020-09-26 |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 3 flagged | AbuseIPDB: 0% confidence, 1 report | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about assalipur.ma at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.