Verdict
cartstack.com.br appears legitimate.
Our checks found nothing pointing to fraud. Ordinary care still applies when you pay or sign in.
| What this site appears to be | PowerCart is a Brazil-focused SaaS product that helps online stores recover abandoned carts using automated, multichannel messaging and reports recovered revenue in real time. The site advertises plans, shows live metrics, and includes links to login and start a trial. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | None flagged itVirusTotal | Clear |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0 reportsAbuseIPDB; shared hosting inflates this count | Noted |
| Domain age | 11 years oldRegistered history | Clear |
| Web archive | Archived since 2015144 snapshots | Clear |
| Certificate | Encrypted connectionIssued by WE1 | Noted |
The page as captured
No screenshot is retained for this report.
Key findings
- Automated classification: Not Scam.
- Domain age: more than 10 years (registration continuity).
- Public web-archive history exists since 2015.
- No flags from the reputation services TrustSniffer consulted at assessment time.
Full analysis
Overview
PowerCart is a Brazil-focused SaaS platform for online merchants that recovers abandoned carts and products through automated email, WhatsApp, SMS, and push journeys. The homepage presents subscription plans, real-time recovered-revenue reporting, merchant performance metrics, login access, and trial onboarding as part of an e-commerce conversion business model.
Scam/Impersonation Risk
No contradictions, phishing indicators, or brand-impersonation signals were observed. The homepage presents a coherent commercial SaaS proposition, with specific functionality, subscription-based pricing, multichannel messaging, and analytics rather than an unexplained financial solicitation. The branding is presented as “CartStack now PowerCart,” but the available evidence does not show two conflicting legal identities. Overall, the site’s content and observed behavior are consistent with an established, apparently legitimate software service.
- The homepage describes automated cart-recovery journeys through email, WhatsApp, SMS, and push, with subscription plans and recovered-revenue reporting.
- Domain registration records show registration in 2015 and an age of approximately 11.42 years.
- The web archive contains 144 snapshots spanning 2015–2026, covering 12 tracked years.
- External reputation checks recorded zero malicious and zero suspicious detections, with no phishing or blacklist hit observed.
Regulatory Verification Notes
The available evidence supports a commercial SaaS interpretation, not a regulated financial-service offering. The site provides links to Terms of Service, Privacy Policy, and Data Deletion pages, but no licensing or registration number is identified in the reviewed content; this is a verification and disclosure point rather than evidence of deception. The real-world operator remains unverified independently, so the site should be described as apparently legitimate and evidence-consistent rather than as an identity-proven entity. A known third-party broker dataset produced no match, which is contextual reputational support only and not a regulatory determination.
- The homepage links to Terms of Service, Privacy Policy, and Data Deletion information.
- The site is served from AS13335, Cloudflare, Inc.
- The transport certificate is issued by WE1, uses DV validation, and is valid to 2026-09-11.
- The homepage identifies PowerCart as part of the Performa.AI ecosystem but does not itself establish an independently verified legal-entity relationship.
What to Verify Next
Before credential or payment interactions, an organization should independently confirm the merchant identity associated with the service, review the applicable subscription, cancellation, refund, and data-processing terms, and ensure that payment protections are available through the chosen billing method. Contact channels and the official login or trial destination should be confirmed through an independent corporate or offline route before onboarding business data.
- The homepage offers login and trial-start paths, creating a direct transition from marketing content to account activity.
- The service is intended to process merchant and customer communications, making independent review of data-handling and deletion terms operationally relevant.
Summary Verdict
The overall posture is high trust and low risk, with the available evidence consistent with an established, apparently legitimate SaaS website. No scam, phishing, impersonation, or other contradictory signal was observed, although the operator’s real-world identity is not independently verified.
Infrastructure Integrity
Cloudflare CDN/WAF protection provides a meaningful mitigating control by placing the site behind mainstream edge infrastructure and reducing direct exposure of the origin environment. This supports infrastructure resilience and normal service delivery but is not, by itself, proof of operator legitimacy.
Closing Assessment
Normal business evaluation is proportionate, subject to ordinary independent checks of merchant identity, contractual terms, and payment protection before credentials or payment details are submitted.
Written analysis generated 2026-08-11 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
No rule findings contributed to this verdict.
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of cartstack.com.br.
- The request stayed on cartstack.com.br. It was not redirected to another domain. Clear
- DNS for this domain is served by cloudflare.com, across 2 name servers. Noted
- The registration is paid up to 2027-03-12. Noted
- The earliest public archive of this site is from 2015-03-19. Clear
- It is hosted on CLOUDFLARENET, from a server in US. Noted
Domain intelligence
| Registrar | Not available |
|---|---|
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:10::ac42:9b40 |
| Name servers | carol.ns.cloudflare.com, tadeo.ns.cloudflare.com |
| SSL issuer | WE1 |
| SSL expiry | 2026-09-11 |
| Domain age | 11.42 years (continuous registration) |
| Domain expiry | 2027-03-12 |
| Archive first seen | 2015-03-19 |
| Archive snapshots | 144 |
| Reputation | VirusTotal: 0 flagged | AbuseIPDB: 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about cartstack.com.br at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.