Verdict
fermo.com.ar shows high-risk / scam indicators.
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
| What this site appears to be | Small Argentinian tool brand (FERMO) product page for orbital sanders with prices, product descriptions, contact phone, email and physical address. Basic informational ecommerce layout with purchase guidance links. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 11 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0 reportsAbuseIPDB; shared hosting inflates this count | Noted |
| Domain age | 4.6 years oldRegistered history | Clear |
| Web archive | Archived since 2021Public history exists | Clear |
| Certificate | Encrypted connectionIssued by YE2 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: 3 to 10 years (registration continuity).
- Public web-archive history exists since 2021.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Security Alert
Fortinet, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
This website is a small Argentine ecommerce storefront for FERMO, presenting orbital sanders and related accessories for construction and painting work through product listings, prices, purchase guidance, and shipping-based retail sales.
Scam/Impersonation Risk
The site presents a coherent small-business catalog and no observed login form, hidden sensitive form, wallet connection, or suspicious external submission behavior. However, this benign page presentation is materially outweighed by confirmed external reputation contradictions: multiple security detections classify the domain as malicious or suspicious, and the domain is blacklisted by external sources. No separate identity inconsistency or direct brand-impersonation finding was observed, but the blacklist evidence creates a high-risk basis for sensitive interaction and cannot be offset by the site's ordinary ecommerce appearance.
- The homepage presents FERMO product listings and purchase guidance without a login or sensitive-data form.
- Observed browser behavior recorded 0 external XHR requests, 0 external POST requests, 0 hidden forms, and 0 wallet-connection runs across 2 successful runs.
- External scanning recorded 11 malicious detections and 1 suspicious detection from 17 effective evaluations; tier-one detections were associated with Fortinet and Sophos.
- The domain was first seen on 2021-12-02 and last seen on 2025-03-30, with 18 archive snapshots across 5 years; the reconciled domain age is 4.59 years.
Regulatory Verification Notes
The site's “Quiénes somos” content identifies FERMO as a brand of IRELOCS SA and describes a business serving construction and painting professionals. That on-site attribution is not independently verified, and the available identity status therefore remains unverified. The site does not provide a license or registration number; for an ordinary tools retailer this is a regulatory-transparency gap rather than, by itself, evidence of fraud. The transport certificate is valid but uses domain validation only, which confirms encrypted transport and not the legal identity of the operator.
- The About section attributes the FERMO brand to IRELOCS SA and describes its professional construction-and-painting-tools purpose.
- The site provides shipping, payment, change, and return information through its purchase-information links.
- TLS is issued by YE2 at DV validation level and is valid to 2026-10-06.
- No license authority or license number is displayed in the reviewed business and purchase content.
What to Verify Next
Before any sensitive engagement, an independent Argentine corporate or commercial-registry check should confirm IRELOCS SA, its relationship to FERMO, and the stated business address. Payment and return terms should be validated independently, with payment methods offering meaningful dispute or chargeback protection. Security teams should also resolve the external malicious classifications and blacklist status before permitting credentials, financial details, or other sensitive traffic.
- The legal identity appears on the About page and should be checked against an independent registry rather than accepted solely from the website.
- The purchase-information area contains the relevant shipping, payment, and change/return policies for independent review.
- The observed site behavior is catalog-oriented and does not demonstrate a protected account or payment workflow.
Summary Verdict
The overall posture is critical, with the available evidence supporting a clear restriction on sensitive interaction. The website’s ordinary storefront presentation does not provide a sufficient basis to overcome the independent reputation contradictions or the unverified connection between the online brand and a real-world operator.
Infrastructure Integrity
The site is hosted directly through Hostinger infrastructure, with no CDN edge layer detected; five resolved addresses were assessed as likely origin addresses. This provides limited infrastructure mitigation, and the hosting arrangement should be treated as a technical delivery fact rather than evidence of legitimacy.
- Served from AS47583, AS-HOSTINGER - Hostinger International Limited, CY.
- The resolved server address is 92.113.23.154 in UA.
- Infrastructure resolution identified 5 unique IP addresses, 0 edge IPs, and 5 likely origin IPs; no CDN was detected.
Closing Assessment
Sensitive actions should remain withheld unless the operator, commercial terms, and external security findings are independently resolved; any unavoidable review should be limited to non-sensitive browsing.
Written analysis generated 2026-08-19 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
2 findings contributed to this verdict, raised by registration and ownership, analysis engine, external reputation.
01 Governance Risk
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
02 Sensitive Interaction Risk
- The analysis matched a pattern TrustSniffer treats as a direct threat to a visitor.Analysis engine
signal:direct_threat - An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of fermo.com.ar.
- The request stayed on fermo.com.ar. It was not redirected to another domain. Clear
- The earliest public archive of this site is from 2021-12-02. Clear
- It is hosted on AS-HOSTINGER, from a server in UA. Noted
Domain intelligence
| Registrar | Not available |
|---|---|
| Hosting | AS-HOSTINGER - Hostinger International Limited, CY |
| Country | UA |
| Server IP | 2a02:4780:45:861f:d561:64b1:97bb:1380 |
| Name servers | Not available |
| SSL issuer | YE2 |
| SSL expiry | 2026-10-06 |
| Domain age | 4.59 years (continuous registration) |
| Domain expiry | Not available |
| Archive first seen | 2021-12-02 |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 11 flagged | AbuseIPDB: 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about fermo.com.ar at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.