Is ctdynamics.com.sg a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

The website currently presents only an auto-generated web-server directory listing titled “Index of /,” with file names, modification dates, sizes, and descriptions rather than a visible company, service, or transactional business proposition. Its apparent function is file serving, not an identifiable customer-facing commercial or financial platform.

Scam/Impersonation Risk

The site has a critical security concern arising from confirmed blacklist findings and multiple external malicious detections. Six evaluators classified it as malicious and one as suspicious, with Fortinet and Sophos among the vendors reporting a threat signal. The sparse directory page contains no login form, payment mechanism, scripts, or visible monetization, but that benign presentation does not offset the external threat evidence. No distinct conflicting legal identities or direct brand-impersonation indicators were observed; the risk conclusion is instead driven by the confirmed external detections. Evidence:

• The homepage displays only “Index of /” and a directory table, with no forms, scripts, or commercial content.
• External reputation checks recorded 6 malicious and 1 suspicious detections across evaluated sources.
• Fortinet and Sophos were identified among the vendors producing threat detections.
• The domain was registered on 2017-01-06 and is approximately 9.62 years old; age alone does not neutralize the current threat findings.
• Archive records contain 371 snapshots spanning 2018–2026, covering 9 tracked years.

Regulatory Verification Notes

The available page does not identify an operating company, responsible person, license, registration number, or licensing authority. This is a material transparency gap for any regulated or financial activity, although the page does not present a discernible financial service for which a specific license claim can be assessed. The operator identity remains unverified; the listed registrar is an administrative registration fact and does not establish who controls or operates the website. The absence of a broker-dataset match provides no positive regulatory conclusion. Evidence:

• The homepage contains only a directory index and no legal, about, terms, privacy, or licensing disclosure.
• The registered registrar is Web Commerce Communications (S) Pte Ltd.
• No license number or licensing authority is displayed in the available site content.

What to Verify Next

Sensitive interaction with the domain should not proceed unless the intended operator is independently confirmed through a trusted offline or previously established channel. Any claimed business activity should be matched against the relevant corporate and regulatory registries using independently sourced legal-entity details, and payment or credential activity should remain suspended until those checks produce a consistent result. Official support and contact channels should also be confirmed independently rather than relying solely on information discovered through this domain. Evidence:

• The operator identity is unverified in the available assessment.
• The homepage provides no identifiable business purpose or legal disclosure against which to validate an operator.
• Confirmed external threat detections and blacklist findings make independent validation a prerequisite for sensitive use.

Summary Verdict

The overall posture is critical, with the available evidence supporting a high likelihood of unacceptable risk for sensitive interaction. The site cannot presently be treated as an established or verified legitimate service, and its minimal public presentation does not provide a credible basis to override the adverse security conclusion.

Infrastructure Integrity

The website is fronted by Cloudflare CDN/WAF infrastructure, which is a mitigating control for direct exposure but is not evidence of legitimacy. The observed address was an edge address, and the origin server was not observable in this analysis. Evidence:

• The site was observed at edge IP 43.229.85.242 on AS38532, operated by EXABYTES-AS-AP — Exabytes Network (Singapore) Pte. Ltd., SG.
• The transport certificate uses DV validation, was issued by YR1, and is valid through 2026-09-26T13:06:10+00:00.
• Infrastructure resolution identified Cloudflare as the CDN/WAF provider, with 1 observed edge IP and 0 origin candidates.

Closing Assessment

The appropriate institutional action is to block or isolate the domain for sensitive workflows and require independent operator validation before any account, credential, payment, or other high-impact interaction is considered.