Is circusbowl.com.mx a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

Circus Bowl – Plaza Sendero is an informational local-business website for a bowling and entertainment venue in San Luis Potosí, presenting Hyperbowl bowling, a café, arcade machines, promotions, visitor information, and contact details for in-person entertainment services.

Scam/Impersonation Risk

The site presents a coherent local-venue profile, and the captured homepage shows no login form, credential collection, payment flow, or apparent brand impersonation. However, this benign page content is outweighed by confirmed external reputation contradictions: the domain has been blacklisted and received multiple malicious detections from evaluated threat-intelligence sources. Browser analysis also identified suspicious inline scripts, external network activity, and recurring console errors, creating a material risk for sensitive interaction even though no credential-harvesting mechanism was observed. No identity contradiction between legal entities was observed, and the site's historical record shows continuity rather than suspicious repurposing. Evidence:

• External reputation telemetry recorded 9 malicious detections from 14 evaluated results and a confirmed blacklist status.
• The homepage behavior recorded 4 suspicious inline scripts, 9 console errors, 29 external XHR requests, and 7 external POST requests across 2 successful runs.
• The domain was registered on 2019-06-10 and is approximately 7.21 years old.
• Archive coverage contains 578 snapshots from 2019-08-21 through 2026-03-11, spanning 8 tracked years.

Regulatory Verification Notes

The website describes an entertainment venue rather than a financial or regulated service and does not make a licensing claim. Its visible content supplies a trading name, address, telephone number, opening hours, and copyright attribution, but does not display a legal-entity name, registration number, or regulatory authorization. The domain registration record names Allan Martin del Campo Herrera, but the available evidence does not independently connect that registrant to the Circus Bowl business. A valid transport certificate and established registration continuity are positive technical and provenance signals, but they do not resolve the external reputation concern or independently verify the operator. Evidence:

• The homepage identifies “Circus Bowl – Plaza Sendero” and provides venue information, but no license or registration number is shown.
• The domain registration record lists Registrar.eu and the registrant name Allan Martin del Campo Herrera.
• The site is served from AS47583, identified as AS-HOSTINGER – Hostinger International Limited, CY.
• TLS is issued by YE1 at DV validation level and is valid to 2026-11-19.

What to Verify Next

Before any sensitive interaction, an organization should independently confirm that the physical venue and its published contact details correspond to an operating business, using an offline or independently sourced channel rather than relying solely on the website. Any applicable local business registration or venue authorization should be checked against the relevant Mexican authority or property-management records. The site's contact and promotional information should not be used as the sole basis for payments, account creation, or sharing personal information. Evidence:

• The captured homepage contains no forms, login controls, or sensitive data fields.
• The captured page is informational and shows no visible payment flow, with the stated business model based on venue visits, games, and food-and-beverage sales.

Summary Verdict

The overall posture is critical and unsuitable for sensitive interaction. Although the website has coherent local-business content and durable technical and historical characteristics, confirmed blacklist and malicious-detection signals establish a decisive trust concern, while the real-world operator remains unverified.

Infrastructure Integrity

The site resolves directly to four likely origin addresses, with no detected CDN edge addresses and no CDN present in the observed configuration. This reduces the mitigating value normally provided by edge-layer protection; the hosting arrangement itself should be treated as infrastructure context, not as evidence of legitimacy. Evidence:

• Infrastructure telemetry recorded 4 unique IP addresses, 0 edge IP addresses, and 4 likely origin IP addresses; no CDN was detected.

Closing Assessment

The appropriate posture is read-only observation only; credentials, account login, personal information, and financial transactions should not be submitted through the site unless the external reputation issue and operator identity have been independently resolved.