Verdict
araujold.com.br shows high-risk / scam indicators.
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
| What this site appears to be | Araujo Light Design is a Brazilian lighting design firm and retailer (since 1989) describing services, product catalog, showroom and technical visits, with contact phone and address listed. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 11 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0 reportsAbuseIPDB; shared hosting inflates this count | Noted |
| Domain age | 6.5 years oldRegistered history | Clear |
| Web archive | Archived since 2021Public history exists | Clear |
| Certificate | Encrypted connectionIssued by YR2 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: 3 to 10 years (registration continuity).
- Public web-archive history exists since 2021.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Security Alert
Fortinet, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
Araujo Light Design presents itself as a Brazilian lighting-design firm and retailer offering architectural lighting projects, exclusive lighting products, showroom visits, and technical installation services. Its apparent business model is local product sales combined with paid design and on-site support.
Scam/Impersonation Risk
Confirmed external threat detections create a severe risk to sensitive interaction with the domain, despite the homepage presenting an ordinary lighting-services business and containing no obvious phishing form or overt brand-impersonation indicators. The domain is blacklisted by multiple external sources, including detections of malicious content, and two named security vendors also flagged it. Sandbox observation additionally identified suspicious inline scripts and substantial post-interaction DOM changes; these technical behaviors are not, by themselves, proof of fraud, but they reinforce the external reputation signal. No conflicting legal-entity names or direct on-page impersonation indicators were observed.
- The external reputation assessment recorded 11 malicious and 2 suspicious detections, with Fortinet and Sophos among the flagged vendors; the domain was also listed by two external blacklist sources.
- The homepage presented a local lighting-design business and contained one contact form without a login or sensitive-data form.
- Browser testing recorded 4 suspicious inline scripts and a maximum post-interaction DOM difference of 906.
- The domain was registered on 2020-02-27 and is approximately 6.48 years old.
Regulatory Verification Notes
The About and homepage content identifies Araujo Light Design as a lighting firm established in 1989, with a showroom, product catalog, technical visits, telephone contact, and a physical address. That presentation is consistent with a conventional local retail and services business, but the real-world operator remains unverified independently. The site does not disclose a license or registration number relevant to its commercial activities; this is a regulatory-transparency item requiring confirmation rather than, standing alone, evidence of a scam. The combined external threat findings nevertheless prevent the site's business presentation from supporting normal confidence in sensitive or financial interactions.
- The homepage describes architectural lighting projects, exclusive products, showroom services, and technical visits.
- The About content states that Araujo Light Design began operating in 1989 and identifies a new showroom and Brazilian lighting brands.
- The site's transport encryption uses a DV certificate issued by YR2, valid through 2026-11-15.
- Hosting resolves through AS19318, operated by IS-AS-1 - Interserver, Inc., in the United States.
What to Verify Next
Independent confirmation should be obtained from the relevant Brazilian commercial or consumer-protection registry that the operating entity, showroom, telephone number, and physical address correspond to the business presented on the site. Any proposed purchase, deposit, account creation, or submission of personal information should remain suspended until the business confirms the domain and payment instructions through an independently sourced contact route. Security teams should also require endpoint and browser controls capable of blocking the domain if the external detections remain active.
- The About page provides the stated business history and showroom description for independent comparison with registry information.
- The homepage and contact content provide the telephone and physical-address details that should be checked through an offline or independently sourced channel.
- The site contains a contact form rather than an account-login workflow, so the principal verification focus is business identity and transaction handling.
Summary Verdict
The overall posture is critical and unsuitable for sensitive interaction. The benign appearance of the site’s stated business model is outweighed by converging external threat detections and confirmed blacklist status, while independent operator identity remains unverified.
Infrastructure Integrity
The site is not fronted by a detected CDN or WAF and resolves to a single likely origin IP, meaning that protective edge infrastructure does not provide meaningful mitigation. Direct hosting is associated with Interserver, Inc.; the infrastructure is technically reachable and uses valid transport encryption, but those characteristics do not establish legitimacy or offset the external reputation risk.
Closing Assessment
Prospective users and enterprise controls should treat the domain as requiring blocking or isolation for credentials, personal information, purchases, and other sensitive transactions until independent business validation and a clean security disposition are obtained.
Written analysis generated 2026-08-21 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
2 findings contributed to this verdict, raised by registration and ownership, analysis engine, behaviour in a sandbox, external reputation.
01 Governance Risk
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
02 Sensitive Interaction Risk
- The analysis matched a pattern TrustSniffer treats as a direct threat to a visitor.Analysis engine
signal:direct_threat - The page carried inline scripts written in a style TrustSniffer treats as suspicious.Behaviour in a sandbox
rule:BEHAV_SUSPICIOUS_INLINE_SCRIPTS - The structure of the page changed sharply while it was loading.Behaviour in a sandbox
rule:BEHAV_DOM_DENSITY_SPIKE - An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of araujold.com.br.
- The request stayed on araujold.com.br. It was not redirected to another domain. Clear
- DNS for this domain is served by net.br, across 2 name servers. Noted
- The registration is paid up to 2031-02-27. Clear
- The earliest public archive of this site is from 2021-11-26. Clear
- It is hosted on IS-AS-1, from a server in US. Noted
Domain intelligence
| Registrar | Not available |
|---|---|
| Hosting | IS-AS-1 - Interserver, Inc, US |
| Country | US |
| Server IP | 66.45.255.154 |
| Name servers | ns.ddf.net.br, ns2.ddf.net.br |
| SSL issuer | YR2 |
| SSL expiry | 2026-11-15 |
| Domain age | 6.48 years (continuous registration) |
| Domain expiry | 2031-02-27 |
| Archive first seen | 2021-11-26 |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 11 flagged | AbuseIPDB: 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about araujold.com.br at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.