Is conigsa.com a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

CONIGSA S.A is a WordPress-based corporate brochure website presenting architectural and construction services, including architectural design, sustainable construction, interior remodeling, and project management, with the apparent business model of attracting clients for paid construction and consulting projects.

Scam/Impersonation Risk

The site’s public content appears consistent with a conventional architecture and construction business: it presents service descriptions, testimonials, contact prompts, and no observed login, payment, cryptocurrency, or sensitive-data form. That benign presentation does not resolve the decisive external contradiction: the domain has been identified by multiple security sources as malicious and is also listed on an external blacklist, with detections from Kaspersky and Sophos. Under a security-forward assessment, the blacklist status and malicious detections outweigh the site’s ordinary corporate appearance. No conflicting legal-entity names, explicit brand impersonation, or phishing form were observed on the reviewed pages, but the website’s identity remains unverified and the external threat findings warrant treating sensitive interaction as unsafe.

Regulatory Verification Notes

The site presents itself as CONIGSA S.A and describes commercial services, but the available material does not independently establish the real-world operator behind the domain. No license, registration number, or regulatory authority is claimed on the reviewed pages; for an architecture or construction provider, the relevant corporate registration, professional qualifications, and project-contracting authority therefore remain verification matters rather than established facts. The public WHOIS record uses privacy protection, which is an administrative limitation and not, by itself, evidence of wrongdoing. The domain was registered through TUCOWS.COM, CO.; its transport encryption is valid but uses domain validation only, which confirms encrypted transport rather than organizational identity.

What to Verify Next

Before any engagement, the proposed operator should be matched against the relevant corporate registry and, where applicable, professional or construction licensing registers using independently obtained contact details. Any quotation, contract, advance payment, or request for documents should be validated through an offline or independently sourced business channel, and payment should use a method offering dispute or recovery protections. Credentials should not be entered on this domain, and sensitive business documents should not be submitted until the external threat findings have been resolved by the organization’s security controls.

Summary Verdict

The overall posture is critical trust risk. Although the website presents a plausible small-business service profile and shows no obvious malicious behavior in the reviewed page interaction, confirmed external threat detections and blacklist status create a material contradiction that prevents a trustworthy assessment for sensitive use. The operator’s real-world identity is not independently verified.

Infrastructure Integrity

The site resolves directly to a single hosting address in Colombia and has no detected CDN or WAF layer; the infrastructure is attributed to WHG-DAL - WHG Hosting Services Ltd, GB, on AS36454. Valid TLS provides encrypted transport, but this infrastructure is only a mitigating technical control and does not offset the external reputation findings.

Closing Assessment

Engagement should remain suspended for logins, credential submission, financial transactions, and sensitive document exchange until the domain’s security reputation and operator identity have been independently cleared.