Verdict
fornecedordaindustria.com.br shows high-risk / scam indicators.
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
| What this site appears to be | Portuguese-language supplier directory for engineering and industrial sectors in Brazil. Offers search by category and a restricted supplier database for registered companies; contains account login/registration links and marketing copy inviting suppliers to join. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 11 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0 reportsAbuseIPDB; shared hosting inflates this count | Noted |
| Domain age | 11 years oldRegistered history | Clear |
| Web archive | Archived since 2017Public history exists | Clear |
| Certificate | Encrypted connectionIssued by YE2 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: more than 10 years (registration continuity).
- Public web-archive history exists since 2017.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Security Alert
Fortinet, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
A Portuguese-language Brazilian business directory and lead-generation portal, the website presents industrial categories, supplier-search functionality, account registration and login, and a restricted database intended to connect engineering-sector buyers with suppliers.
Scam/Impersonation Risk
The website’s apparent business-directory purpose and the absence of detected brand-impersonation or phishing mechanics do not offset the external threat evidence. The domain is reported as blacklisted by multiple sources, with 11 malicious detections and one suspicious detection in the evaluated reputation set; Fortinet and Sophos were among the flagged vendors. The sandbox also recorded substantial DOM changes after interaction and repeated console errors, which are technical integrity concerns even though no hidden forms, wallet activity, clipboard manipulation, cloaking, or suspicious inline scripts were observed. Accordingly, login, credential submission, and financial interactions should be treated as unsafe pending independent resolution of the reputation findings.
- The homepage presents a supplier directory and restricted industrial-company database, while the account interface exposes login and registration functions.
- External reputation telemetry recorded 11 malicious detections and 1 suspicious detection; Fortinet and Sophos were flagged, and blacklist status was confirmed.
- The browser behavior assessment recorded 3,134 DOM mutations, a maximum post-interaction DOM difference of 3,134, and 10 console errors across two successful runs.
- The domain was registered on 2015-04-13 and is approximately 11.37 years old; historical records cover 51 snapshots spanning 2017–2026, with 10 years tracked.
Regulatory Verification Notes
The homepage describes access to company names, CNPJ details, email addresses, industrial sectors, and a database of more than 60,000 engineering companies. The supplied site content does not disclose a claimed license, licensing authority, or registration number, and the real-world operator remains unverified; these are verification gaps rather than independent proof of misconduct. The directory and lead-generation model is commercially intelligible, but the available legal and identity disclosure is insufficient to establish the responsible entity or any regulated status. The absence of a broker-dataset match provides no regulatory confirmation.
- The homepage states that registered companies can access a restricted database containing company names, CNPJ information, email addresses, and industrial sectors.
- The homepage invites suppliers to join and states that the database includes more than 60,000 engineering companies across Brazil.
- No license claim, licensing authority, or license number is recorded in the reviewed site content.
- The site’s transport encryption uses a DV certificate issued by YE2, valid through 2026-10-11.
What to Verify Next
Before any sensitive interaction, an independent party should confirm the operating entity and its CNPJ through authoritative Brazilian corporate records, validate any applicable commercial or data-processing obligations, and confirm that the published support and registration channels belong to that entity. The blacklist findings should also be independently adjudicated with the relevant security providers before credentials, restricted database access, or payment details are used.
- The homepage claims to provide company and contact information for industrial businesses, making the accuracy and lawful sourcing of database records material to due diligence.
- The account interface includes login and registration functionality, creating a sensitive authentication surface.
- Hosting and certificate details identify technical infrastructure but do not independently establish the operator’s legal identity.
Summary Verdict
The website has a coherent directory presentation but carries a critical sensitive-interaction risk posture because confirmed external blacklist and malicious-detection signals materially outweigh the otherwise ordinary page content. Legitimacy remains apparent only at the level of the presented business model; the evidence does not independently verify the real-world operator.
Infrastructure Integrity
The site resolves directly to four likely origin addresses without a detected CDN or WAF edge layer. It is hosted on AS47583, operated by Hostinger International Limited, with infrastructure geolocated in Ukraine; this is a neutral hosting fact and offers no basis to treat the provider as responsible for the site’s content. The valid DV TLS certificate issued by YE2 provides transport encryption, but it does not authenticate the business operator.
Closing Assessment
Sensitive actions should remain suspended until the external reputation findings, operator identity, and applicable business disclosures have been independently validated through authoritative channels.
Written analysis generated 2026-08-22 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
2 findings contributed to this verdict, raised by registration and ownership, analysis engine, behaviour in a sandbox, external reputation.
01 Governance Risk
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
02 Sensitive Interaction Risk
- The analysis matched a pattern TrustSniffer treats as a direct threat to a visitor.Analysis engine
signal:direct_threat - The page replaced a large part of its own content after loading.Behaviour in a sandbox
rule:BEHAV_DOM_CHANGE_HIGH - The structure of the page changed sharply while it was loading.Behaviour in a sandbox
rule:BEHAV_DOM_DENSITY_SPIKE - The page rewrote itself after it was interacted with, so what a visitor first sees is not what they end up on.Behaviour in a sandbox
rule:BEHAV_DOM_DIFF_AFTER_INTERACTION - An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of fornecedordaindustria.com.br.
- The request stayed on fornecedordaindustria.com.br. It was not redirected to another domain. Clear
- DNS for this domain is served by dns-parking.com, across 2 name servers. Noted
- The registration is paid up to 2027-04-13. Noted
- The earliest public archive of this site is from 2017-05-12. Clear
- It is hosted on AS-HOSTINGER, from a server in UA. Noted
Domain intelligence
| Registrar | Not available |
|---|---|
| Hosting | AS-HOSTINGER - Hostinger International Limited, CY |
| Country | UA |
| Server IP | 2a02:4780:45:7344:1fdf:8cd5:1a3d:27f1 |
| Name servers | ns1.dns-parking.com, ns2.dns-parking.com |
| SSL issuer | YE2 |
| SSL expiry | 2026-10-11 |
| Domain age | 11.37 years (continuous registration) |
| Domain expiry | 2027-04-13 |
| Archive first seen | 2017-05-12 |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 11 flagged | AbuseIPDB: 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about fornecedordaindustria.com.br at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.