Verdict
maracarvalho.com.br shows high-risk / scam indicators.
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
| What this site appears to be | Artist Mara Carvalho personal site in Portuguese with sections for biography, works, media, agenda and contact; includes an external Instagram link. No forms or financial features detected. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 10 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0 reportsAbuseIPDB; shared hosting inflates this count | Noted |
| Domain age | 25 years oldRegistered history | Clear |
| Web archive | Archived since 2001Public history exists | Clear |
| Certificate | Encrypted connectionIssued by YR1 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: more than 10 years (registration continuity).
- Public web-archive history exists since 2001.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Security Alert
Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
This is a Portuguese-language personal portfolio website for artist Mara Carvalho, presenting biography, works, photographs, videos, news, performance dates, and contact information. Its apparent purpose is to promote the artist’s work, shows, and booking or audience-contact opportunities rather than to provide an online financial service.
Scam/Impersonation Risk
The site’s visible content does not show a login form, payment workflow, wallet connection, phishing form, financial product, or apparent brand impersonation, and no identity inconsistency was identified across the supplied page content. However, this benign presentation is outweighed by a confirmed blacklist signal supported by multiple external reputation sources: ten malicious detections and one suspicious detection were recorded, with a tier-one security provider also flagging the domain. This creates a material risk for sensitive interaction even though the website itself resembles a conventional artist portfolio. The long registration history and historical continuity are useful provenance signals, but they do not neutralize the current external threat detections.
- External reputation assessment recorded 10 malicious and 1 suspicious detections; the domain was also marked as present on an external blacklist.
- Domain registration records show creation on 2001-05-31 and an age of 25.24 years.
- Historical records show 55 snapshots spanning 2001–2026, covering 26 years.
- The homepage and contact-oriented content contain no login form, sensitive form, wallet connection, or financial feature.
Regulatory Verification Notes
The reviewed material presents an artist biography, works, media, agenda, and contact sections, but it does not identify a regulated financial or commercial service. No license, licensing authority, or registration number is disclosed in the supplied site content; for this type of portfolio, that is a transparency and identity-verification gap rather than evidence of a financial scam by itself. The real-world operator connection is assessed as likely but not independently verified, so the on-site presentation should not be treated as proof of legal identity. Transport security is present, but the certificate uses domain validation only and does not independently establish the operator’s identity.
- The homepage is titled “Mara Carvalho | Home” and identifies sections for biography, works, photographs, videos, agenda, news, and contact.
- No licensing claim, licensing authority, or registration number appears in the supplied page content.
- The site’s TLS certificate is issued by YR1, uses DV validation, and is valid to 2026-09-23T16:35:47+00:00.
What to Verify Next
Before any booking, payment, credential submission, or other sensitive exchange, independently confirm that the person or organization receiving the interaction is the intended counterparty. Current performance details and contact channels should be corroborated through an independently established social or offline channel, and any payment should use a protected method with a documented recipient and cancellation terms. If the interaction involves a regulated activity or intermediary service beyond the portfolio’s stated purpose, the relevant Brazilian registry should be checked directly.
- The homepage provides an external social-media reference that can support independent confirmation of the artist and current activity.
- The supplied page analysis identifies no on-site payment or sensitive-data form, so any request for such information would represent a change in the observed interaction model.
- The business description indicates that monetization is likely indirect through performances, bookings, or related arrangements rather than an on-site transaction system.
Summary Verdict
The overall posture is critical risk for sensitive interaction. Although the site presents as a conventional artist portfolio with a long-lived domain and no visible phishing or financial mechanics, the confirmed external blacklist and malicious-detection signals prevent the domain from being treated as trusted.
Infrastructure Integrity
The domain resolves directly to infrastructure associated with AS53243, Brasil Site Informatica LTDA, in Brazil; no CDN or WAF edge service was detected, and one likely origin address was identified. Direct hosting provides no additional protective intermediary, so infrastructure offers limited mitigation against the external reputation findings.
- Served from AS53243, Brasil Site Informatica LTDA, BR.
- Resolved infrastructure is in Brazil and includes 1 unique IP, with 0 edge IPs and 1 likely origin IP.
- The transport certificate uses DV validation and issuer YR1.
Closing Assessment
Pending independent confirmation through an established offline or separately verified channel, activity should remain limited to non-sensitive informational viewing, with no login, credential submission, or financial transaction conducted through the site.
Written analysis generated 2026-08-21 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
2 findings contributed to this verdict, raised by registration and ownership, analysis engine, external reputation.
01 Governance Risk
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
02 Sensitive Interaction Risk
- The analysis matched a pattern TrustSniffer treats as a direct threat to a visitor.Analysis engine
signal:direct_threat - An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
Identity verification
| Status | LIKELY |
|---|---|
| Identity score | 73/100 |
| Identity verification confidence | 74% |
- Trusted social count=1
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of maracarvalho.com.br.
- The request stayed on maracarvalho.com.br. It was not redirected to another domain. Clear
- DNS for this domain is served by srv.br, across 2 name servers. Noted
- The registration is paid up to 2028-05-31. Clear
- The earliest public archive of this site is from 2001-08-23. Clear
- It is hosted on AS53243, from a server in BR. Noted
Domain intelligence
| Registrar | Not available |
|---|---|
| Hosting | AS53243 - Brasil Site Informatica LTDA, BR |
| Country | BR |
| Server IP | 177.53.143.56 |
| Name servers | ns1.cpwm.srv.br, ns2.cpwm.srv.br |
| SSL issuer | YR1 |
| SSL expiry | 2026-09-23 |
| Domain age | 25.24 years (continuous registration) |
| Domain expiry | 2028-05-31 |
| Archive first seen | 2001-08-23 |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 10 flagged | AbuseIPDB: 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about maracarvalho.com.br at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.