Is cortinadevidrobh.com.br a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

The website is a Portuguese-language local glassworks business serving customers seeking glass-curtain glazing, installation, maintenance, windows, doors, aluminium frames, bathroom shower enclosures, sealing, and related services. Its apparent business model is quotation-led sales and service delivery, with customer acquisition through telephone and WhatsApp rather than an online checkout.

Scam/Impersonation Risk

The site’s business presentation is consistent with a local trades service and the available page content contains no evident login form, payment flow, phishing form, or brand-impersonation indicator. However, this benign presentation is materially contradicted by confirmed blacklist status and external malicious detections, including detections attributed to Fortinet and Sophos. Those signals establish a critical sensitive-interaction risk even though the website itself does not display an obvious abuse pattern; the site should therefore be treated as potentially compromised, misclassified, or unsafe for credential and financial activity. Evidence:

• The homepage presents local glassworks services and quotation requests, with no evident e-commerce cart, online payment form, or login mechanism.
• Domain registration records show registration on 2018-10-12, with an age of 7.86 years and expiry on 2029-10-12.
• Archive records contain 394 snapshots spanning 2021–2026, covering 6 tracked years with a maximum gap of 1 year.
• External reputation telemetry records 12 malicious and 2 suspicious detections, with Fortinet and Sophos among the flagged vendors; blacklist status is confirmed by two external sources.

Regulatory Verification Notes

The real-world operator identity remains unverified by the available evidence. The site content does not present a licensing claim, license number, or registration number, so its corporate status and any applicable trade or construction authorizations cannot be established from the website. This is a regulatory-verification gap rather than, by itself, proof of fraud; nevertheless, the confirmed external reputation issue makes independent identity and authorization checks essential before engagement. Evidence:

• The available business content does not state a legal entity name, license authority, or license number.
• The site’s TLS certificate is domain-validated and was issued by YE1, with validity through 2026-10-16.
• Page content is service-oriented and identifies the business category as local glassworks/home improvement rather than a regulated financial or investment service.

What to Verify Next

An independent check should confirm the operating business through the relevant Brazilian corporate and municipal records, establish that the telephone and WhatsApp channels belong to that business, and obtain a written quotation identifying the contracting entity, address, warranty terms, and payment recipient. Any deposit or advance payment should use a method offering appropriate dispute or chargeback protection, and sensitive interaction should remain suspended until the external detections are resolved by a trusted security process. Evidence:

• The homepage’s primary conversion path is quotation contact by telephone or WhatsApp rather than an online payment workflow.
• The site has no sensitive form or login form in the observed page content.
• Behavioral testing recorded no hidden forms, wallet-connect activity, clipboard manipulation, or cloaking.

Summary Verdict

The overall posture is critical sensitive-interaction risk. The site appears to describe a plausible local service business, but that apparent legitimacy is outweighed by confirmed external threat and blacklist contradictions, while the operator’s identity remains unverified.

Infrastructure Integrity

The site resolves through AS47583, operated by AS-HOSTINGER / Hostinger International Limited, with infrastructure registered in the RIPE NCC region and located in Ukraine. Four likely origin IP addresses were identified, no CDN edge IPs were detected, and no CDN vendor was identified; this provides no independent legitimacy assurance and does not mitigate the external reputation concern.

Closing Assessment

Passive viewing may be retained for information gathering, but login, credential submission, financial transactions, and other sensitive actions should not proceed until independent business validation and resolution of the security detections are completed.