Verdict
perfectpay.com.br appears legitimate.
Our checks found nothing pointing to fraud. Ordinary care still applies when you pay or sign in.
| What this site appears to be | Marketing/landing page for PerfectPay, a Brazilian-focused payment/checkout SaaS targeting digital entrepreneurs. Describes features (checkout, recovery, integrations, member areas), pricing model (per-transaction fee), support and metrics. No explicit malicious or credential-harvesting elements visible in the provided DOM snapshot. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | None flagged itVirusTotal | Clear |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0 reportsAbuseIPDB; shared hosting inflates this count | Noted |
| Domain age | 8.1 years oldRegistered history | Clear |
| Web archive | Archived since 2019193 snapshots | Clear |
| Certificate | Encrypted connectionIssued by WE1 | Noted |
The page as captured
No screenshot is retained for this report.
Key findings
- Automated classification: Not Scam.
- Domain age: 3 to 10 years (registration continuity).
- Public web-archive history exists since 2019.
- No flags from the reputation services TrustSniffer consulted at assessment time.
Full analysis
Overview
PerfectPay is a Brazilian-focused payment and checkout SaaS platform that presents tools for digital entrepreneurs, including transaction processing, merchant support, sales-conversion features, and related account and member-area services.
Scam/Impersonation Risk
No contradictions were observed between the website’s identity, content, technical behavior, and external reputation signals. The homepage presents a coherent payment-platform business model and does not show phishing, credential-harvesting, hidden forms, wallet-draining activity, clipboard manipulation, or cloaking. Marketing statements such as “more than 500,000 digital entrepreneurs” and repeated claims about improving merchant profits are promotional assertions rather than independent proof of scale or identity, but they do not establish impersonation or fraud. Overall, the available evidence is consistent with an established, apparently legitimate website, while the real-world operator remains independently unverified.
- The homepage is a substantive PerfectPay payment-platform landing page with no detected phishing or credential-harvesting indicators.
- Browser testing recorded zero hidden forms, zero password submissions to external forms, zero wallet-connect or wallet-drainer activity, zero clipboard hijack events, and no cloaking.
- The domain was registered on 2018-06-22 and is approximately 8.14 years old.
- Historical records show 193 snapshots from 2019-06-21 through 2026-06-08, covering 8 tracked years.
Regulatory Verification Notes
PerfectPay describes a transaction-fee SaaS model for checkout and payment operations, with sales recovery through WhatsApp and email, member areas or learning-management functionality, integrations and analytics, account managers, and conversion tools such as upsells and order bumps. These services may involve payment-processing, merchant, consumer-protection, and financial-services obligations depending on the specific activity and jurisdiction. The reviewed site material does not present a license or registration number, so regulatory status should be confirmed independently; this is a disclosure and verification gap, not evidence of a scam. The site’s marketing claims and product descriptions should likewise not be treated as proof of corporate identity or regulatory authorization.
- The homepage describes transaction-based pricing for approved sales and promotes checkout, recovery, integrations, member areas, and merchant support.
- Hosting is identified as AS13335, CLOUDFLARENET — Cloudflare, Inc., US.
- The site’s TLS certificate is issued by WE1 at DV validation level and is valid through 2026-10-30.
- External reputation checks recorded zero malicious detections, zero suspicious detections, and no adverse blacklist result for the domain.
What to Verify Next
Before credential or payment interactions, an organization should independently confirm the merchant’s legal identity, applicable payment or financial-services registrations, refund and dispute procedures, and the entity responsible for holding or settling funds. Contact channels should be validated through an independently sourced route, and any agreement or checkout flow should be reviewed for fees, recurring obligations, data handling, and payment-protection terms. The homepage’s account-creation and producer-area functions make these checks particularly relevant before activating a merchant account or processing live transactions.
- The homepage provides “Create Account,” “Access My Purchases,” and “Access Producer Area” pathways.
- The site presents merchant-support and account-management services that may create contractual or operational dependencies.
- The reviewed page does not display a license or registration number for independent confirmation.
Summary Verdict
The overall posture is high trust and low risk, with the evidence converging on an established, apparently legitimate website rather than a scam or impersonation site. Confidence is limited only by the absence of independent verification connecting the web presence to a specific real-world operator; this does not outweigh the otherwise consistent legitimacy signals.
Infrastructure Integrity
The site is protected by Cloudflare’s CDN and WAF, with observed traffic terminating at Cloudflare edge infrastructure rather than a directly exposed origin. This provides a meaningful layer of availability and exposure mitigation, but it is treated only as a protective infrastructure signal and not as proof of business legitimacy.
- Four observed edge addresses were associated with AS13335: 104.20.17.171, 172.66.154.27, 2606:4700:10::6814:11ab, and 2606:4700:10::ac42:9a1b.
- The infrastructure provider is CLOUDFLARENET — Cloudflare, Inc., US, with Cloudflare CDN/WAF protection detected.
Closing Assessment
Normal browsing and ordinary platform evaluation are proportionate to the current assessment, but independent merchant-identity, applicable-registry, return-policy, and payment-protection checks should be completed before submitting credentials or initiating material transactions.
Written analysis generated 2026-08-10 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
No rule findings contributed to this verdict.
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of perfectpay.com.br.
- The request stayed on perfectpay.com.br. It was not redirected to another domain. Clear
- DNS for this domain is served by cloudflare.com, across 2 name servers. Noted
- The registration is paid up to 2027-06-22. Noted
- The earliest public archive of this site is from 2019-06-21. Clear
- It is hosted on CLOUDFLARENET, from a server in US. Noted
Domain intelligence
| Registrar | Not available |
|---|---|
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:10::6814:11ab |
| Name servers | arnold.ns.cloudflare.com, yolanda.ns.cloudflare.com |
| SSL issuer | WE1 |
| SSL expiry | 2026-10-30 |
| Domain age | 8.14 years (continuous registration) |
| Domain expiry | 2027-06-22 |
| Archive first seen | 2019-06-21 |
| Archive snapshots | 193 |
| Reputation | VirusTotal: 0 flagged | AbuseIPDB: 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about perfectpay.com.br at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.