vatendimentosbr.shop
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of vatendimentosbr.shop
The domain vatendimentosbr.shop appears to host a Portuguese-language landing page themed around CPF consultation and "financial record regularization" in Brazil. The page title, "Consulta Nacional de CPF – Regularização Educativa," and the on-page text suggest it presents itself as an informational or educational platform where visitors can start a CPF-related check and learn about linked financial records.
Based on the visible content, the site claims to be an independent platform with no connection to banks or official government bodies. It uses a simple single-page layout with a call-to-action button, brief explanatory text, and links labeled as privacy policy, terms of use, and digital security. The domain name itself does not clearly identify a known institution or established organization, and no verifiable operator identity is evident from the provided scan data.
Safety Assessment for vatendimentosbr.shop
This website shows multiple risk indicators at the time of this scan. It was flagged by 20 out of 91 security engines, with many of those detections classifying the page as phishing or otherwise malicious. In addition, one threat-database check returned a suspicious listing, and the domain's IP address is listed on one mail-reputation blocklist. While the malware file scan did not detect malicious files in the small set of scanned resources, that does not outweigh the broader phishing-related consensus from the security-engine results.
The surrounding context also raises concern. The domain is very new at 42 days old, has no established traffic ranking, and uses a generic .shop address despite presenting a CPF-related service that could be mistaken for something official or institution-linked. The page includes disclaimers stating it is independent and not affiliated with banks or public agencies, but the overall theme still involves sensitive financial-identity subject matter that may encourage user interaction.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid Let's Encrypt SSL certificate, which means traffic may be encrypted in transit, but HTTPS alone should not be treated as a trust signal. The server appears to run nginx on an IP hosted by DigitalOcean in North Bergen, United States. The domain uses GoDaddy nameservers and the DNSSEC status is unsigned.
From a technical standpoint, the setup looks like a relatively lightweight hosted landing page rather than a long-established institutional service. The young domain age, unsigned DNSSEC, and externally loaded script from another domain may be worth additional caution, especially given the phishing-related scan results.
Share your experience with this website. Was it safe? Did you encounter any issues?