Is wbuy.com.br legit? TrustSniffer's high-trust assessment: 80/100

Overview

The website is the Portuguese-language commercial presence of wBuy, an established Brazilian e-commerce software provider offering subscription-based online-store creation, migration, customization, payment processing, omnichannel management, applications, implementation services, and merchant support.

Scam/Impersonation Risk

No identity contradictions, phishing indicators, impersonation, confirmed malicious behavior, or blacklist findings were observed. The site’s coherent commercial proposition and sustained historical presence support its legitimacy. One isolated third-party malicious classification is not corroborated by the broader reputation evidence and does not alter the overall assessment.

• Domain records show registration on 8 April 2015 (~11.33 years old), with Fernando H Oliveira recorded as the owner and expiry set for 8 April 2030.
• The domain has 116 archive snapshots spanning 10 January 2016–13 May 2026 (11 years tracked), with no detected suspicious repurposing or semantic drift.
• The homepage presents a consistent wBuy-branded merchant platform rather than content associated with another brand.
• Interactive testing of the homepage found no cloaking, hidden forms, external password forms, wallet-draining behavior, clipboard hijacking, or untrusted external submissions.

Regulatory Verification Notes

The site identifies its operating legal company and publishes a Brazilian CNPJ, providing meaningful corporate accountability for an e-commerce SaaS provider. It does not present itself as an investment or brokerage service, and no financial-services licence is claimed in the supplied content. The available evidence therefore supports an ordinary commercial-software assessment rather than a regulated-investment interpretation; the absence of a broker-intelligence match has no adverse legal significance.

• The homepage and pricing content disclose the operator’s legal company name and CNPJ.
• The pricing page describes transparent monthly and annual subscriptions, optional applications, implementation and migration services, and transaction commissions where merchants do not use wBuy Pay.
• The homepage provides privacy, help, support, and customer-reference material alongside merchant login and store-creation routes.
• The site’s transport encryption uses a YR1-issued domain-validated TLS certificate, valid until 20 October 2026.

What to Verify Next

Before entering a material commercial commitment, an enterprise customer should reconcile the contracting entity and CNPJ with the executed agreement, review the applicable service, privacy, payment, commission, data-processing, and termination terms, and confirm the official support channels independently. Payment settlement responsibilities, data ownership, export arrangements, service availability, and incident-response obligations should be documented for procurement and operational-risk review.

• The homepage distinguishes standard store creation and migration from a dedicated offering for brands selling above R$100,000 per month, indicating that contractual scope may vary by merchant scale.
• The product page advertises wBuy Pay, wBuy AI, omnichannel functions, a theme store, a services marketplace, and specialist assistance, requiring feature-specific responsibility and data-flow review.
• The homepage claims more than 50,000 stores created, more than R$8.5 billion in sales, and over 200 available applications; these marketing figures warrant contractual substantiation when material to procurement.
• The published support and implementation options provide identifiable channels through which service scope and escalation arrangements can be confirmed.

Summary Verdict

The website is a legitimate, established, and trustworthy commercial platform. Its coherent identity, mature operating history, substantive product information, accountable business presentation, and predominantly clean security and reputation profile converge on a high-confidence assessment. Normal interaction, including account login and standard platform use, is appropriate.

Infrastructure Integrity

The site resolves directly to a likely origin server in Brazil rather than operating behind a detected CDN or WAF. Direct origin visibility is not evidence of illegitimacy, although it provides less network-layer shielding than an edge-protected architecture.

• The hosting infrastructure serves the site from AS53243 (Brasil Site Informatica LTDA, Brazil) at a single resolved address.
• Infrastructure analysis identified one likely origin address, no edge addresses, and no detected CDN.
• The address had no recorded abuse reports and a zero abuse-confidence assessment in the supplied reputation evidence.

Closing Assessment

Prospective users may engage with the platform normally, while organizations making significant operational commitments should complete routine contractual, privacy, payment, and service-resilience due diligence.