Is ficus.in safe? TrustSniffer's low-trust assessment: 40/100

Security Alert

Fortinet, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

Ficus – Instinct Engineering is a corporate marketing and portfolio website presenting engineering and design services for heavy and light industry, with sections for sectors, services, projects, company information, employment, insights, contact, and bid requests. Its apparent business model is to attract B2B clients and obtain professional-services project work rather than process consumer payments or credentials directly.

Scam/Impersonation Risk

The site presents as a conventional engineering-services business, and its homepage contains no login form, sensitive submission form, payment flow, wallet connection, or other high-risk conversion mechanism. However, this benign presentation is outweighed by confirmed external threat detections and blacklist status associated with the domain. No conflicting legal-entity names or direct brand-impersonation indicators were observed in the supplied page findings, but the external signals create a material contradiction that warrants treating sensitive interaction with the site as unsafe. The single hosting-IP abuse report is not treated as evidence against the website itself because it was attributed to shared provider infrastructure with zero confidence. Evidence:

• The homepage identifies “Ficus – Instinct Engineering,” describes engineering and design services, and provides “Request bid” and “Reach Us” pathways.
• Page analysis found no login form, hidden sensitive form, password submission, wallet connection, or payment element.
• External reputation checks recorded 4 malicious detections, with Fortinet and Sophos among the flagged vendors, and confirmed blacklist status from two sources.
• The hosting-IP report concerned shared data-center infrastructure and was explicitly discounted as provider-level attribution.

Regulatory Verification Notes

The available material supports an apparent corporate-services identity but does not independently verify the operating entity or establish regulatory authorization. The site identifies the business as Ficus – Instinct Engineering and supplies a Coimbatore address, contact details, and links to LinkedIn and Facebook; identity verification therefore remains likely rather than proven. No licensing claim, registration number, or regulatory authority is presented in the supplied business content. That omission is a transparency and verification gap, not by itself evidence of a scam. The website’s generic template text, including placeholder-style service, testimonial, and company-description language, further limits the strength of its corporate disclosures. Evidence:

• The homepage and company-content areas identify Ficus – Instinct Engineering and describe engineering services for heavy and light industry.
• The contact content supplies a Coimbatore address and social links to LinkedIn and Facebook.
• WHOIS records show registration on 2010-04-18 through Endurance International Group India Private Limited, with Ficus Consulting India Private Limited listed as the organization.
• The domain has 271 archive snapshots spanning 2008–2025, with 18 years tracked, indicating substantial historical continuity rather than a newly created web presence.
• Hosted on AS46606, Unified Layer, US; TLS certificate issued by YR2 using DV validation, valid to 2026-10-23.

What to Verify Next

Before any sensitive engagement, the prospective counterparty should independently confirm the company’s legal registration and any sector-specific authorization through the relevant Indian corporate or regulatory registry, using contact details obtained independently of the website. Any bid, contract, invoice, bank-account instruction, or document-transfer request should be validated through an offline or independently sourced business contact. Account login, credential submission, and financial transactions should not be undertaken on the basis of this website’s presentation alone. Evidence:

• The supplied business content requests client engagement and bids but does not provide a license number or named licensing authority.
• The site publishes contact and social-channel information that can be cross-checked against independently sourced corporate records.
• Confirmed external threat detections and blacklist status require independent validation of the counterparty before sensitive interaction.

Summary Verdict

The website has a credible-looking engineering-services presentation and a long-running domain history, but the confirmed blacklist and malicious threat detections produce a low-trust posture. The available evidence is insufficient to support sensitive interaction or to treat the apparent business identity as independently established.

Infrastructure Integrity

The site resolves directly to Unified Layer hosting without a detected CDN or WAF layer, leaving the hosting environment as the primary observable delivery infrastructure. Transport encryption is present, but the certificate is domain-validated only; these controls provide baseline technical protection and do not offset the external reputation contradiction.

Closing Assessment

Treat the site as suitable only for limited, non-sensitive review while independently validating the business, its legal standing, and every proposed transaction or document exchange through trusted external channels.

Signals weighed against the site

• AbuseIPDB: 1 report on hosting IP 162.251.80.25 (Unified Layer, Data Center/Web Hosting/Transit), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.