Verdict
avbob.co.za appears legitimate.
Our checks found nothing pointing to fraud. Ordinary care still applies when you pay or sign in.
| What this site appears to be | Official AVBOB corporate page describing funeral products, member benefits and a public advisory reporting a data breach. Provides contact numbers, branch locator and regulatory disclosures. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | None flagged itVirusTotal | Clear |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0 reportsAbuseIPDB; shared hosting inflates this count | Noted |
| Domain age | 28 years oldRegistered history | Clear |
| Web archive | Never archivedNo public history of this site | Watch |
| Certificate | Encrypted connectionIssued by YR1 | Noted |
The page as captured
No screenshot is retained for this report.
Key findings
- Automated classification: Not Scam.
- Domain age: more than 10 years (registration continuity).
- No flags from the reputation services TrustSniffer consulted at assessment time.
- The operator behind the site could not be independently connected to a real-world brand or person.
Full analysis
Overview
AVBOB’s website is a corporate informational site for a mutual insurance and funeral-services provider, presenting funeral plans, funeral policies, member benefits, contact channels, branch information, and a public advisory concerning a personal-information breach.
Scam/Impersonation Risk
No contradictions were observed: the available evidence contains no phishing, impersonation, blacklist, or malicious-content finding. The homepage’s corporate presentation is consistent with an established insurance and funeral-services operation, and it does not expose a login form, hidden sensitive form, wallet connection, or payment-collection interface. Behavioral testing did identify external requests and substantial post-interaction page changes, but these signals were not accompanied by cloaking, credential capture, wallet-draining behavior, or other high-risk abuse patterns. The identity of the real-world operator remains independently unverified, so the site should be described as apparently legitimate rather than identity-proven.
- Homepage: no red flags, brand-impersonation finding, login form, hidden form, or sensitive form was identified.
- Homepage behavior: 22 external XHR requests, 24 external POST requests, 4 non-whitelisted POST requests, and a maximum post-interaction DOM difference of 32,830 were recorded without associated phishing or abuse behavior.
- Domain registration record: registered 1998-03-03 and approximately 28.46 years old through Lexsynergy Limited.
- External reputation checks: 0 malicious detections, 0 suspicious detections, and no blacklist hit were recorded.
Regulatory Verification Notes
The site presents a coherent corporate insurance profile, including funeral and life insurance products, member benefits, contact numbers, a branch locator, and references to regulatory obligations under the Protection of Personal Information Act. The public breach advisory is a transparency-positive disclosure of an identified incident, the potentially affected information, notification steps, and ongoing forensic investigation. The available page evidence does not identify a license number or independently verified insurance authorization, so regulatory status should be treated as a verification matter rather than inferred from the site’s presentation. No adverse broker-reputation association was identified.
- Homepage: describes funeral services, funeral plans, funeral policies, member benefits, contact channels, and branch information.
- Public advisory page: states that unauthorized access affected certain personal information of policyholders, employees, and suppliers, and that affected parties and the Information Regulator were notified.
- Hosting record: served from AS37611, AFRIHOST SP (PTY) LTD, South Africa.
- Transport encryption: TLS certificate issued by YR1 at DV validation level, valid to 2026-08-30.
What to Verify Next
Before credential or payment interactions, independently confirm the operating legal entity and insurance authorization through the relevant South African regulatory registry. Confirm that policy documents, premium terms, claims procedures, and cancellation or benefit conditions correspond to the independently verified entity. Contact details should be validated through an independently obtained official channel or a physical branch, particularly when responding to communications concerning the disclosed breach. Payment-protection and dispute mechanisms should also be confirmed for any premium transaction.
- Homepage: provides public contact numbers and a branch locator suitable for independent channel confirmation.
- Public advisory page: directs affected parties toward direct contact or a branch visit when communication authenticity is uncertain.
- Regulatory content: references POPIA compliance and notification of the Information Regulator but does not, in the supplied evidence, provide a license number or independently verified authorization record.
Summary Verdict
Available evidence is consistent with an established, apparently legitimate website and supports a high-trust, low-risk posture with no observed scam or impersonation contradictions. Confidence in connecting the website to a specific real-world operator is limited, so legitimacy should remain qualified rather than treated as independently proven.
Infrastructure Integrity
The site resolves directly to a single origin address, with no CDN or WAF detected and no edge-IP layer identified. This means the hosting arrangement provides limited intermediary shielding, although the resolved infrastructure is identifiable and the absence of an edge layer is not, by itself, evidence of malicious activity.
Closing Assessment
Ordinary engagement is proportionate to the available risk assessment, subject to independent confirmation of merchant identity, policy terms, payment protections, and official communication channels before credentials or payments are submitted.
Written analysis generated 2026-08-11 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
No rule findings contributed to this verdict.
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of avbob.co.za.
- The request stayed on avbob.co.za. It was not redirected to another domain. Clear
- Registration is published under Lexsynergy Limited. Clear
- DNS for this domain is served by telkomsa.net, across 2 name servers. Noted
- The registration is paid up to 2027-03-03. Noted
- It is hosted on AFRIHOST SP (PTY) LTD, from a server in ZA. Noted
Domain intelligence
| Registrar | Lexsynergy Limited |
|---|---|
| Hosting | AFRIHOST SP (PTY) LTD - AFRIHOST SP (PTY) LTD, ZA |
| Country | ZA |
| Server IP | 165.73.1.164 |
| Name servers | ns1.telkomsa.net, ns2.telkomsa.net |
| SSL issuer | YR1 |
| SSL expiry | 2026-08-30 |
| Domain age | 28.46 years (continuous registration) |
| Domain expiry | 2027-03-03 |
| Archive first seen | Not available |
| Archive snapshots | 0 |
| Reputation | VirusTotal: 0 flagged | AbuseIPDB: 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about avbob.co.za at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.