Verdict
inbioma.pe shows high-risk / scam indicators.
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
| What this site appears to be | INBIOMA - Peruvian environmental consultancy offering marine, oceanographic, hydrographic, topographic and environmental monitoring services. Page lists services, certifications/registrations and contact/subscribe options. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 13 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0 reportsAbuseIPDB; shared hosting inflates this count | Noted |
| Domain age | 13 years oldRegistered history | Clear |
| Web archive | Archived since 2013Public history exists | Clear |
| Certificate | Encrypted connectionIssued by YR2 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: more than 10 years (registration continuity).
- Public web-archive history exists since 2013.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Security Alert
Fortinet, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
INBIOMA is a corporate website for a Peruvian environmental consultancy presenting marine, oceanographic, hydrographic, topographic, geodesic, geophysical, and environmental-monitoring services for projects such as ports and concessions. Its apparent business model is the sale of professional studies, monitoring, and related consultancy engagements.
Scam/Impersonation Risk
The site’s visible content is consistent with a conventional environmental consultancy: it describes services, presents claimed Peruvian registrations and certifications, contains no login form, and exposes only a newsletter-subscription form rather than a sensitive transaction workflow. However, this benign presentation is outweighed by confirmed external malicious detections and a confirmed blacklist status for the domain. No identity inconsistency or brand-impersonation finding was supplied, so the principal concern is domain-level security and reputation risk rather than a proven impersonation of a named organization. Sensitive interactions, credential submission, financial activity, and downloading or executing site-provided content should therefore be treated as unsuitable absent independent clearance.
- The homepage describes INBIOMA as a Peruvian environmental consultancy providing marine studies, oceanography, hydrography, topography, geodesy, marine geophysics, and environmental monitoring.
- The homepage contains one newsletter-subscription form and no login or password form.
- External reputation assessment recorded 13 malicious detections and a confirmed blacklist condition for the domain.
- The historical record first seen on 2013-03-01T06:29:00Z and last seen on 2025-02-20T19:45:52Z spans 13 years of tracked activity.
Regulatory Verification Notes
The homepage claims registration with SUNARP and SUNAT, enrollment in the Registro Nacional de Proveedores, and authorizations or certificates associated with the Directorate of Hydrography and Navigation and the Directorate General of Captaincies and Coastguards. These are material regulatory and corporate claims, but the supplied evidence does not independently verify them or connect the website to a confirmed real-world operator. The site’s legal and governance disclosure is consequently unclear, and the available regulatory confidence is low. The negative external reputation signal is a security-reputation finding, not a legal or licensing determination.
- The homepage cites SUNARP, SUNAT, Registro Nacional de Proveedores, constancia de inscripción Nro. 004-2010, and Certificado de Registro Nro. 030-10/R.
- The domain has registration continuity of 13.467488021902806 years.
- Hosting is provided through AS52368, identified as AS52368 - ZAM LTDA., CL.
- The site uses a DV TLS certificate issued by YR2, valid to 2026-11-03T03:30:36+00:00.
What to Verify Next
Before any sensitive engagement, an independent party should confirm the cited registrations and certificates directly with the relevant Peruvian registries or authorities, using identifiers supplied through an independently obtained channel rather than relying solely on the website. The contracting entity, invoicing details, professional references, and authority of the proposed counterparty should also be validated through offline or independently sourced contact information. Security teams should first obtain a current malware and domain-reputation determination and review any files, forms, or communications associated with the site in a controlled environment.
- The homepage provides specific registration and certificate references that can be checked against the named authorities.
- The contact and subscription functions are the site’s identified interaction mechanisms.
- The site’s page content contains no obvious phishing indicators, but this does not resolve the confirmed external domain-reputation findings.
Summary Verdict
The overall posture is critical trust risk. The site presents a coherent corporate-consultancy narrative, but that presentation does not overcome the confirmed domain-level security contradictions, and the operator’s real-world identity remains unverified.
Infrastructure Integrity
The site resolves directly to one identified origin address, with no CDN or WAF detected and no edge-IP layer reported. This configuration provides no meaningful protective infrastructure mitigation and should not be interpreted as evidence of legitimacy.
Closing Assessment
The appropriate institutional posture is to suspend sensitive interaction until the domain reputation, operator identity, and claimed official registrations have been independently cleared; any necessary review should remain limited to controlled, non-sensitive inspection.
Written analysis generated 2026-08-20 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
2 findings contributed to this verdict, raised by registration and ownership, analysis engine, external reputation.
01 Governance Risk
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
02 Sensitive Interaction Risk
- The analysis matched a pattern TrustSniffer treats as a direct threat to a visitor.Analysis engine
signal:direct_threat - An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of inbioma.pe.
- The request stayed on inbioma.pe. It was not redirected to another domain. Clear
- The earliest public archive of this site is from 2013-03-01. Clear
- It is hosted on AS52368, from a server in CL. Noted
Domain intelligence
| Registrar | Not available |
|---|---|
| Hosting | AS52368 - ZAM LTDA., CL |
| Country | CL |
| Server IP | 186.64.118.5 |
| Name servers | Not available |
| SSL issuer | YR2 |
| SSL expiry | 2026-11-03 |
| Domain age | 13.47 years (continuous registration) |
| Domain expiry | Not available |
| Archive first seen | 2013-03-01 |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 13 flagged | AbuseIPDB: 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about inbioma.pe at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.