Is realiscapemarketing.co.za a scam? TrustSniffer's high-risk assessment: 5/100

Overview

The website currently presents only a basic web-server directory index, exposing file names and metadata rather than a functioning business, service, or commercial interface; its apparent purpose cannot be established from the visitor-facing content.

Scam/Impersonation Risk

The site has a critical sensitive-interaction risk posture because external threat intelligence records multiple malicious detections and a confirmed blacklist presence. These findings are materially more significant than the benign appearance of the directory page: the page contains no login form, payment mechanism, wallet interaction, or overtly deceptive content, but that limited surface does not resolve the external threat contradiction. No separate brand impersonation or conflicting legal-entity identity was observed. Evidence:

• The homepage displays only “Index of /” with file names and metadata, with no visible business explanation or interactive features.
• External reputation assessment recorded 4 malicious detections and 1 suspicious detection among 5 evaluated detections.
• The domain is recorded as blacklisted by multiple external sources.
• Archive coverage is recorded from 2013-08-13 to 2021-12-19, spanning 9 years tracked; the historical material does not establish a suspicious repurposing pattern.

Regulatory Verification Notes

The available page does not identify an operating company, regulated activity, licence, registration number, or governing terms. This is a substantive disclosure gap for any prospective financial or commercial engagement, although the current directory page does not visibly offer such services. Independent identity verification remains unresolved. A long-established registration record and valid transport encryption are technical continuity signals, but they do not establish that the present site is operated by a legitimate entity or that any future service would be authorised. Evidence:

• The homepage contains only a directory index and no operator, licence, or regulatory disclosure.
• Domain registration: registered 2009 (~17.34 years old) through TEKSA Internet Provider cc; expiry 2027-04-21.
• Served from AS37611 (AFRIHOST SP (PTY) LTD, South Africa).
• TLS certificate issued by YR2 at DV validation level, valid to 2026-10-28.

What to Verify Next

Before any engagement beyond passive inspection, an organisation should independently identify the operator through an authoritative corporate or regulatory registry relevant to the claimed service, confirm that the domain is an approved official channel through an independently obtained contact route, and require transaction safeguards that permit recovery or dispute. Any files exposed by the directory should be treated as untrusted until separately scanned and their provenance established. Evidence:

• The homepage provides no official service description against which a licence or corporate identity can be matched.
• The directory structure exposes files directly and supplies no visible explanation of their origin or intended use.
• The technical endpoint is resolved to a single hosting address, providing no independent confirmation of the operator’s identity.

Summary Verdict

The available evidence supports a critical-risk assessment for sensitive interaction. The site’s minimal, non-interactive presentation is not itself proof of malicious activity, but it cannot offset the confirmed external threat contradictions or the unresolved operator identity. Credentials, financial activity, and other sensitive exchanges are not appropriate on the basis of the current evidence.

Infrastructure Integrity

The endpoint is hosted directly through AFRIHOST SP (PTY) LTD on AS37611 in South Africa, with no CDN or WAF detected and one likely origin address exposed. The DV TLS certificate provides transport encryption only; it is a limited technical safeguard and does not validate the site’s operator or content.

Closing Assessment

Prospective users should restrict activity to passive observation and should not submit credentials, open sensitive sessions, download untrusted files, or conduct financial transactions unless independent identity, authorisation, and file-safety checks produce clear confirmation.