Is cybermati.co.uk a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Google, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

cyber MATI is a product landing website for an AI-powered anti-phishing solution aimed at enterprises. It presents real-time detection of phishing and malicious websites, a phishing-risk calculator, claims of protection against spear-phishing and whaling, and channels for business enquiries and social engagement.

Scam/Impersonation Risk

The site presents a coherent security-software proposition and the captured homepage contains no login, payment, credential-collection, or investment flow. However, this benign page presentation is outweighed by a confirmed external threat contradiction: the domain is blacklisted, was classified as malicious by Google Safe Browsing, and received multiple malicious detections across external reputation assessments, including detections associated with Fortinet, Google, and Sophos. No conflicting legal identities or explicit brand-impersonation indicators were observed, but the external detections create a material risk for sensitive interaction and prevent the site from being treated as trustworthy. Evidence:

• The homepage markets cyber MATI as an AI-powered anti-phishing product and includes a phishing-risk calculator rather than a credential or payment form.
• External reputation assessments recorded 16 malicious detections and 1 suspicious detection; Google Safe Browsing also classified the domain as malicious.
• The domain was registered on 2024-12-26 and is approximately 1.65 years old; archive records contain 51 snapshots spanning 2024–2026, with 3 years tracked.

Regulatory Verification Notes

The available page content identifies the product brand but does not provide a corporate legal name, licensing claim, registration number, or clearly stated regulatory basis. That is a disclosure gap requiring independent confirmation, although the service described is enterprise security software rather than an obviously regulated financial product. The site's real-world operator is only likely connected to the presented brand, not independently verified. A single abuse report associated with an IP address was explicitly attributed to shared provider infrastructure and carries zero confidence, so it is a weak contextual signal rather than site-specific attribution. Evidence:

• The homepage identifies “MATI” and “cyber MATI” as the product and describes enterprise security capabilities without naming a legal operating entity.
• No licence authority or licence number is stated in the supplied site content.
• The site is hosted on AS8560, IONOS-AS - IONOS SE, DE.
• The transport certificate is a DV certificate issued by Sectigo Public Server Authentication CA DV R36, valid until 2026-12-29.

What to Verify Next

Before any commercial engagement, an independent registry or corporate-records check should confirm the operator behind the cyber MATI brand and its authority to provide the advertised services. Procurement should also obtain formal service terms, privacy and data-processing documentation, security assurances, and a verifiable business address through an independently sourced channel. Any future portal, download, authentication, or payment workflow should undergo a separate security review rather than being trusted solely because the public landing page is non-interactive. Evidence:

• The supplied material is a marketing landing page and does not establish the operator's legal identity or regulatory status.
• The captured page contains no sign-in or payment flow, so future interaction surfaces would represent a separate assessment scope.
• The homepage provides social and contact routes that should be authenticated through an independent, offline business channel before use.

Summary Verdict

The overall posture is critical risk, driven by confirmed external threat contradictions that override the site's otherwise coherent product presentation and normal technical operation. The brand connection appears plausible but remains unverified, and the available evidence does not support sensitive interaction.

Infrastructure Integrity

A CDN/WAF protection layer is present, and observed addressing was limited to edge infrastructure rather than an independently visible origin. This reduces direct exposure of the underlying service and is a mitigating technical control, but it does not establish legitimacy or offset the external reputation findings.

Closing Assessment

The appropriate institutional posture is to suspend credential, data, download, and payment interactions pending independent operator validation and a fresh security review of any proposed engagement workflow.

Signals weighed against the site

• AbuseIPDB: 1 report on hosting IP 2001:8d8:100f:f000::200 (1&1 IONOS SE, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.