Verdict
aurthokal.com shows high-risk / scam indicators.
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
| What this site appears to be | Regional Bengali news website publishing articles on national politics, economy, business, lifestyle, sports and international news; includes contact information and office address. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 4 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0 reportsAbuseIPDB; shared hosting inflates this count | Noted |
| Domain age | 2.8 years oldRegistered history | Clear |
| Web archive | Archived since 2018Public history exists | Clear |
| Certificate | Encrypted connectionIssued by YR1 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: 1 to 3 years (registration continuity).
- Public web-archive history exists since 2018.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Security Alert
Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
This website is a Bengali-language regional news publisher presenting articles and features on national politics, economics, business, stock markets, lifestyle, sports, international affairs, investigative reporting, health, culture, and related topics; its apparent business model is editorial publishing supported by advertising, sponsorship, or paid listings.
Scam/Impersonation Risk
The site’s visible content presents as a conventional news and media outlet, with no observed login form, sensitive submission form, financial solicitation, cryptocurrency feature, or detected brand-impersonation pattern. However, that benign page presentation is materially outweighed by confirmed external reputation contradictions: the domain is blacklisted by multiple external sources, received four malicious and one suspicious detections, and was flagged by a major security vendor. Browser testing also recorded non-whitelisted external activity, substantial post-interaction DOM change, and repeated console errors. These signals support a security-forward posture for any sensitive interaction, even though the page itself did not display obvious fraud mechanics. No identity contradiction or direct impersonation finding was observed.
- The homepage contains Bengali news categories and article listings, with no login or sensitive-data form detected.
- External reputation checks recorded 4 malicious and 1 suspicious detections, with a confirmed blacklist designation from 2 external sources.
- Browser testing recorded 30 external XHR requests, 2 non-whitelisted external requests, a maximum external-activity proportion of 71.5%, and a post-interaction DOM difference of 4,945.
- Archive records show 43 snapshots spanning 2018-04-12 through 2024-06-16, with 7 years tracked and no confirmed semantic repurposing.
Regulatory Verification Notes
The site functions as a news publisher rather than an explicitly regulated financial service, and no license claim or license number is presented in the supplied site evidence. Its disclosure position is therefore unclear for purposes of independently connecting the publication to a responsible legal operator; identity verification remains unverified. This is a transparency and governance gap, not by itself proof of criminal conduct, but it is significant alongside the external security findings. The domain is registered through Global Domain Group LLC and uses a domain-validated TLS certificate, which establish technical administration and encrypted transport but do not validate the publisher’s legal identity or editorial accountability.
- Domain registration: created 2023-10-30 and currently recorded as approximately 2.81 years old, expiring 2027-10-30; registrar: Global Domain Group LLC.
- The homepage identifies the publication through the title “aurthokal” and provides contact information and an office address, but no license authority or license number is recorded.
- Hosting is served from AS131192, BDWEBSDOTCOM-AS-AP - BD WEBS DOT COM, BD.
- TLS is issued by YR1 at DV validation level and is valid to 2026-10-07T11:32:52+00:00.
What to Verify Next
Before any account, credential, payment, or other sensitive interaction, the operator should be independently identified through official corporate or media-registration records applicable to the publication’s jurisdiction. Any claimed office address and contact channels should be confirmed through an offline or independently sourced route, and the domain should be checked again with the relevant security team before it is allowlisted or embedded in organizational workflows. The site should also be reviewed for a clearly attributable editorial policy, ownership disclosure, and complaint or correction process.
- The site’s visible business model is news publishing, with likely advertising, sponsorship, or paid-listing revenue rather than a clearly stated regulated service.
- The supplied identity-verification result contains no independent real-world identity signals.
- The site has no detected sensitive form, wallet connection, password form, or external password-submission destination.
- No matching broker entry was identified in the supplied third-party reputational dataset.
Summary Verdict
The overall posture is critical risk for sensitive interaction. The site appears operationally consistent with a regional news publication, but that surface presentation does not reconcile the confirmed external security contradictions and unresolved operator-accountability concerns. It should not be treated as a trusted destination for credentials, financial activity, or other sensitive use.
Infrastructure Integrity
The site resolves directly to a single hosting address on BD WEBS DOT COM infrastructure in Bangladesh, with no CDN or WAF detected and no separate edge-IP layer observed. The absence of that protective intermediary does not establish maliciousness, but it provides no meaningful infrastructure-based mitigation against the confirmed reputation risk.
Closing Assessment
Organizational users should restrict the site to controlled, non-sensitive observation while security and legal teams complete independent operator validation and a fresh technical review. Any decision to permit broader access should be based on documented clearance rather than the site’s news-oriented appearance alone.
Written analysis generated 2026-08-22 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
2 findings contributed to this verdict, raised by registration and ownership, analysis engine, behaviour in a sandbox, external reputation.
01 Governance Risk
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
02 Sensitive Interaction Risk
- The analysis matched a pattern TrustSniffer treats as a direct threat to a visitor.Analysis engine
signal:direct_threat - Most of what the page loaded came from other domains rather than from this one.Behaviour in a sandbox
rule:BEHAV_EXTERNAL_RATIO_HIGH - The page rewrote itself after it was interacted with, so what a visitor first sees is not what they end up on.Behaviour in a sandbox
rule:BEHAV_DOM_DIFF_AFTER_INTERACTION - The structure of the page changed sharply while it was loading.Behaviour in a sandbox
rule:BEHAV_DOM_DENSITY_SPIKE - An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of aurthokal.com.
- The request stayed on aurthokal.com. It was not redirected to another domain. Clear
- Registration is published under Global Domain Group LLC. Clear
- DNS for this domain is served by bdwebs.org, across 3 name servers. Noted
- The registration is paid up to 2027-10-30. Clear
- The earliest public archive of this site is from 2018-04-12. Clear
- It is hosted on BDWEBSDOTCOM-AS-AP, from a server in BD. Noted
Domain intelligence
| Registrar | Global Domain Group LLC |
|---|---|
| Hosting | BDWEBSDOTCOM-AS-AP - BD WEBS DOT COM, BD |
| Country | BD |
| Server IP | 151.158.48.41 |
| Name servers | NS1.BDWEBS.ORG, NS2.BDWEBS.ORG, NS3.BDWEBS.ORG |
| SSL issuer | YR1 |
| SSL expiry | 2026-10-07 |
| Domain age | 2.81 years (continuous registration) |
| Domain expiry | 2027-10-30 |
| Archive first seen | 2018-04-12 |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 4 flagged | AbuseIPDB: 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about aurthokal.com at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.