Verdict
piscinaveronza.com shows high-risk / scam indicators.
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
| What this site appears to be | Municipal pool (Piscina Municipal A Veronza) page listing 2025 hours, pricing for daily entry and season passes, reservation instructions pointing to deportesribadavia.es, facility rules, contact details and location in Ribadavia, Ourense. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 12 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0 reportsAbuseIPDB; shared hosting inflates this count | Noted |
| Domain age | 5.2 years oldRegistered history | Clear |
| Web archive | Archived since 2021Public history exists | Clear |
| Certificate | Encrypted connectionIssued by Sectigo Public Server Authentication CA DV R36 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: 3 to 10 years (registration continuity).
- Public web-archive history exists since 2021.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Security Alert
Fortinet, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
What appears to be a municipal facility-information website for Piscina Municipal A Veronza in Ribadavia, Ourense, presenting 2025 opening hours, entry and season-pass prices, facility rules, contact details, and instructions directing visitors to an external reservation and ticketing portal.
Scam/Impersonation Risk
The site presents a coherent local-facility use case, with pool schedules, public pricing, QR-based entry instructions, and a stated connection to Ribadavia. However, this benign presentation conflicts materially with external threat intelligence: the domain is reported as blacklisted, and multiple security detections classify it as malicious or suspicious, including detections from Fortinet and Sophos. The available evidence does not establish that the municipal content and the domain’s current security reputation belong to the same legitimate operating entity. The domain’s real-world identity also remains unverified. A published contact address, [email protected], is a contact-channel integrity anomaly because it uses a different domain from the website and should not be treated as proof of affiliation. No separate identity inconsistency, brand-impersonation finding, or Google Safe Browsing malicious result was recorded, but the confirmed blacklist and malicious detections are sufficient to make sensitive interaction inappropriate.
- Homepage: identifies “Piscina Municipal A Veronza,” lists Ribadavia facility information, and directs reservations to an external booking domain.
- External reputation assessment: 12 malicious detections and 1 suspicious detection were recorded, with Fortinet and Sophos among the flagged vendors.
- Domain registration record: registered 2021-06-10 and approximately 5.2 years old; registrar listed as Tecnocratica Centro de Datos, S.L.
- External blacklist status: confirmed by two listed blacklist sources.
Regulatory Verification Notes
The page functions as an informational and ticketing page rather than presenting itself as a financial or investment service. Its municipal-facility claims, pricing references, and reservation instructions are internally consistent at the content level, but the supplied evidence does not independently verify the site’s connection to Ribadavia or establish a responsible legal operator. No license or registration number is claimed in the available business-model assessment; for this type of facility, that is a disclosure and affiliation-verification matter rather than standalone evidence of fraud. The low page-authority signal and the absence of an independently verified identity reinforce the need to distinguish the site’s stated municipal purpose from confirmed institutional ownership.
- Homepage: states that prices derive from “Ordenanza nº 24” and provides facility rules and access conditions for 2025.
- Homepage: provides the facility telephone number, location context, and an external reservation destination.
- Hosting telemetry: served from AS8560, IONOS-AS - IONOS SE, DE.
- Transport security telemetry: TLS certificate issued by Sectigo Public Server Authentication CA DV R36, using DV validation, valid to 2026-12-09.
What to Verify Next
Before any payment, reservation, identity submission, or credential use, an independent offline or official municipal channel should confirm that this domain is authorized to represent Piscina Municipal A Veronza. The reservation destination should be reached through an independently confirmed Ribadavia municipal website or telephone contact rather than through an unverified site link. Any payment page should be checked for matching legal-entity details, a protected payment processor, clear cancellation terms, and transaction records that can be disputed through the payment provider. Security teams should also treat the confirmed external detections as a blocking condition for enterprise access until the domain’s status is resolved.
- Homepage: reservation instructions identify an external booking portal, creating a distinct destination that requires independent confirmation.
- Homepage: no login form or sensitive-data form was observed on the captured page.
- Contact and facility information: provides an independent basis for confirming authorization through municipal channels.
- Technical behavior: two successful runs showed no hidden forms, wallet activity, clipboard manipulation, or password-submission forms.
Summary Verdict
The overall posture is critical and unsuitable for sensitive interaction. Although the page content resembles a legitimate municipal information service, the confirmed external blacklist and malicious detections outweigh the otherwise coherent presentation and prevent the website from being treated as an established or verified institutional service.
Infrastructure Integrity
The website is protected by a CDN/WAF layer, and all observed addresses were associated with IONOS infrastructure; the origin server was not observable in the analysis. This provides some exposure reduction but is only a mitigating technical control and does not offset the site’s adverse reputation evidence.
- Infrastructure: CDN/WAF protection was observed, with 2 edge addresses and 0 likely origin candidates.
Closing Assessment
The site should be restricted to non-sensitive observation while independent municipal authorization and the adverse security detections remain unresolved; account, credential, payment, and other sensitive interactions should not proceed.
Written analysis generated 2026-08-21 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
2 findings contributed to this verdict, raised by registration and ownership, analysis engine, behaviour in a sandbox, external reputation.
01 Governance Risk
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE - Registration details are held behind a privacy service, so no operator is named publicly. This is common and legal, and it also means there is nobody to check.Registration and ownership
rule:KF_WHOIS_PRIVATE - The registration record withholds contact details for the operator.Registration and ownership
rule:KF_WHOIS_HIDDEN
02 Sensitive Interaction Risk
- The analysis matched a pattern TrustSniffer treats as a direct threat to a visitor.Analysis engine
signal:direct_threat - Most of what the page loaded came from other domains rather than from this one.Behaviour in a sandbox
rule:BEHAV_EXTERNAL_RATIO_HIGH - An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 25% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of piscinaveronza.com.
- The request stayed on piscinaveronza.com. It was not redirected to another domain. Clear
- Registration is published under Tecnocratica Centro de Datos, S.L.. Clear
- DNS for this domain is served by ui-dns.biz, across 4 name servers. Noted
- The registration is paid up to 2027-06-10. Noted
- The earliest public archive of this site is from 2021-12-20. Clear
- It is hosted on IONOS-AS, from a server in DE. Noted
Domain intelligence
| Registrar | Tecnocratica Centro de Datos, S.L. |
|---|---|
| Hosting | IONOS-AS - IONOS SE, DE |
| Country | DE |
| Server IP | 2001:8d8:100f:f000::2de |
| Name servers | NS1045.UI-DNS.BIZ, NS1045.UI-DNS.COM, NS1045.UI-DNS.DE, NS1045.UI-DNS.ORG |
| SSL issuer | Sectigo Public Server Authentication CA DV R36 |
| SSL expiry | 2026-12-09 |
| Domain age | 5.20 years (continuous registration) |
| Domain expiry | 2027-06-10 |
| Archive first seen | 2021-12-20 |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 12 flagged | AbuseIPDB: 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about piscinaveronza.com at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.