Is mercadaoatacadista.com.br legit? TrustSniffer's high-trust assessment: 98/100

Overview

The website is the official-style corporate and promotional presence of Mercadão Atacadista, a Brazilian wholesale and retail supermarket chain serving São Paulo and the Baixada Santista. It presents weekly grocery offers, physical-store information, private-label goods, recipes, employment opportunities, delivery through iFood, and volume purchasing for businesses.

Scam/Impersonation Risk

No identity contradictions, phishing behavior, brand impersonation, or deceptive payment mechanics were observed. The homepage’s detailed and internally coherent retail proposition—covering fresh produce, butcher, bakery, store-finding, customer service, and business purchasing—aligns with an established supermarket operation. External threat-reputation checks were clean, while interactive testing identified no credential theft, hidden forms, cloaking, wallet abuse, clipboard manipulation, or suspicious scripts.

• The homepage identifies itself as “Mercadão Atacadista - Oficial” and presents coherent supermarket departments, weekly promotions, store locations, operating information, and customer-service functions.
• The domain was registered in 2012 and is approximately 14.23 years old; registration records identify Eduardo Munhoz as the owner and show expiry on 2028-05-11.
• Homepage behavior showed no login form, hidden form, external password submission, cloaking, wallet-provider interaction, clipboard hijacking, or suspicious inline script.
• External reputation assessment recorded zero malicious and zero suspicious detections, with no malicious safe-browsing finding or confirmed threat-list match.

Regulatory Verification Notes

The website represents an ordinary wholesale and retail grocery business rather than a financial, investment, or other evidently licensed service. Accordingly, the absence of a financial license claim is not adverse. The homepage supplies practical identity and accountability signals, including physical-store discovery, telephone and customer-service facilities, operating hours, privacy links, an ombudsman channel, and recruitment and supplier pathways. The available evidence does not establish the completeness of formal corporate disclosures, but it identifies no conflicting legal entity or misleading regulatory claim.

• The homepage provides store-location, contact, ombudsman, supplier, employment, privacy, and operating-hours pathways tied to the retail business.
• The homepage’s only identified form collects name, telephone number, and email for marketing subscriptions; it has no untrusted destination.
• The hosting service is served from AS397273 (RENDER - Render, US).
• The site uses a valid DV TLS certificate issued by WE1, valid to 2026-10-11.

What to Verify Next

Routine institutional onboarding should confirm that the contracting entity, invoicing details, bank-account beneficiary, and commercial terms correspond to the relevant physical store or business-sales department. Privacy terms and marketing-consent language should be reviewed before transferring customer or employee data, and official contact channels should be independently confirmed for material procurement arrangements.

• The homepage advertises volume-based commercial purchasing, making contracting and payment-instruction validation relevant for business customers.
• The newsletter form requests personal contact information, while the homepage provides a privacy pathway and cookie-consent mechanism.
• Store-finding and customer-service facilities provide independent channels for confirming material commercial instructions.

Summary Verdict

The website has a high-trust, legitimate, and established posture, supported by convergent identity, operational, behavioral, and external-reputation evidence. No contradictory or deceptive signals were identified, and the observed content is consistent with the stated retail business.

Infrastructure Integrity

The site operates on identified Render hosting in the United States with valid encrypted transport. No CDN or WAF mitigation was evidenced; the conventional hosting posture is consistent with the observed service, but infrastructure characteristics are treated only as supporting operational context rather than proof of legitimacy.

Closing Assessment

Normal interaction, including account login where offered, standard website use, and routine commercial engagement, is appropriate; standard institutional counterparty controls remain proportionate for material transactions.