Is vatendimentosbr.shop safe?

http://vatendimentosbr.shop/

14/100

Dangerous

Analysis coverage: strong · 4 of 5 core capabilities

DangerousDanger1–20High RiskHigh21–44Moderate RiskModerate45–69Low RiskLow70–84SafeSafe85–100

Verdict

Phishing page impersonating a Brazilian CPF lookup service, flagged by 18 antivirus engines.

This is a phishing page that pretends to offer free CPF checks. Eighteen of 92 antivirus engines flagged it as malicious, with BitDefender, CyRadar, and others specifically calling it phishing.

Read the full analysis

20 antivirus engines flagged this URLalphaMountain.ai, BitDefender, Cluster25, CRDF, CyRadar

Close the page and do not enter any personal or financial information. Use official Brazilian government channels for CPF queries.

01 · Investigation Brief

Investigation Brief

The domain hosts a page titled 'Consulta Nacional de CPF – Regularização Educativa' that promises free financial-record checks. Multiple tier-1 engines including BitDefender, CyRadar, and Emsisoft all classify the site as phishing. The page loads scripts from external domains funnel-rebuilder-magic.lovable.app and a3t3nd1r.site, a common pattern for credential-harvesting campaigns. No contact details, business registration, or verifiable operator information appear on the captured page. The combination of high engine detections and missing legitimacy signals confirms the malicious verdict.

Page Content

The captured page presents itself as an independent educational platform for checking CPF records. It claims the service is free, LGPD-compliant, and does not request sensitive data. No contact email, phone number, or physical address is provided. The page loads external scripts from funnel-rebuilder-magic.lovable.app and a3t3nd1r.site, which are not typical for legitimate Brazilian government or financial services.

Infrastructure

The site is hosted on IP 137.184.156.90 with a clean abuse score but still flagged by 18 of 92 antivirus engines. Valid Let's Encrypt SSL is present with 47 days remaining. One redirect hop occurs within the same domain. External domains transparencyreport.google.com, funnel-rebuilder-magic.lovable.app, and a3t3nd1r.site are loaded during page rendering.

Domain History

WHOIS data is unavailable, preventing age verification. The domain is not indexed in global traffic rankings, indicating very low visibility or recent creation.

Web Reputation

Eighteen antivirus engines returned malicious verdicts, with alphaMountain.ai, BitDefender, Cluster25, CRDF, CyRadar, and Emsisoft explicitly labeling the page as phishing. Browser blocklist feeds returned clean. No independent review aggregators have entries for this domain.

What this means for you

Do not enter any personal information or click through to further pages. The combination of phishing detections and missing operator details indicates this is a credential-harvesting operation.

Why the score is 14

The score combines saved deterministic evidence with the grounded analysis available for this report. Coverage remains separate so missing sources cannot be mistaken for clean results.

02 · Security Evidence

Security evidence

Antivirus Engines

Fresh result

20 engines flagged this URL

Every saved adverse engine is listed below. The full provider matrix remains available for audit.

Malicious: 18
Suspicious: 2
Total: 92

Adverse antivirus results
Engine	Finding
alphaMountain.aiMalicious	phishing
BitDefenderMalicious	phishing
Cluster25Malicious	phishing
CRDFMalicious	malicious
CyRadarMalicious	phishing
EmsisoftMalicious	phishing
Forcepoint ThreatSeekerMalicious	phishing
FortinetMalicious	phishing
G-DataMalicious	phishing
GridinsoftMalicious	phishing
KasperskyMalicious	phishing
LevelBlueMalicious	phishing
LionicMalicious	phishing
NetcraftMalicious	malicious
OpenPhishMalicious	phishing
RisingMalicious	phishing
VIPREMalicious	phishing
WebrootMalicious	malicious
ESETSuspicious	suspicious
SOCRadarSuspicious	suspicious

All 92 engine results

alphaMountain.ai - phishing - Malicious
BitDefender - phishing - Malicious
Cluster25 - phishing - Malicious
CRDF - malicious - Malicious
CyRadar - phishing - Malicious
Emsisoft - phishing - Malicious
Forcepoint ThreatSeeker - phishing - Malicious
Fortinet - phishing - Malicious
G-Data - phishing - Malicious
Gridinsoft - phishing - Malicious
Kaspersky - phishing - Malicious
LevelBlue - phishing - Malicious
Lionic - phishing - Malicious
Netcraft - malicious - Malicious
OpenPhish - phishing - Malicious
Rising - phishing - Malicious
VIPRE - phishing - Malicious
Webroot - malicious - Malicious
ESET - suspicious - Suspicious
SOCRadar - suspicious - Suspicious
0xSI_f33d - unrated - Clean
Abusix - clean - Clean
Acronis - clean - Clean
ADMINUSLabs - clean - Clean
AILabs (MONITORAPP) - clean - Clean
AlienVault - clean - Clean
AlphaSOC - unrated - Clean
Antiy-AVL - clean - Clean
ArcSight Threat Intelligence - unrated - Clean
AutoShun - unrated - Clean
Bfore.Ai PreCrime - unrated - Clean
Bkav - unrated - Clean
BlockList - clean - Clean
Blueliv - clean - Clean
Certego - clean - Clean
ChainPatrol - unrated - Clean
Chong Lua Dao - clean - Clean
CINS Army - clean - Clean
Criminal IP - clean - Clean
CSIS Security Group - unrated - Clean
CTX AI - clean - Clean
Cyan - unrated - Clean
Cyble - clean - Clean
desenmascara.me - clean - Clean
DNS8 - unrated - Clean
Dr.Web - clean - Clean
EmergingThreats - clean - Clean
Ermes - unrated - Clean
ESTsecurity - clean - Clean
Fortra - unrated - Clean
GCP Abuse Intelligence - unrated - Clean
Google Safe Browsing - clean - Clean
GreenSnow - clean - Clean
GreyNoise - unrated - Clean
Guardpot - unrated - Clean
Heimdal Security - clean - Clean
Hunt.io Intelligence - unrated - Clean
IPsum - clean - Clean
Juniper Networks - clean - Clean
K7AntiVirus - unrated - Clean
Lumu - unrated - Clean
Malwared - clean - Clean
MalwarePatrol - clean - Clean
MalwareURL - unrated - Clean
Mimecast - unrated - Clean
PhishFort - unrated - Clean
Phishing Database - clean - Clean
Phishtank - clean - Clean
PREBYTES - clean - Clean
PrecisionSec - unrated - Clean
Quick Heal - clean - Clean
Quttera - clean - Clean
SafeToOpen - unrated - Clean
Sangfor - clean - Clean
Sansec eComscan - unrated - Clean
Scantitan - clean - Clean
SCUMWARE.org - clean - Clean
Seclookup - clean - Clean
Snort IP sample list - unrated - Clean
Sophos - clean - Clean
StopForumSpam - clean - Clean
Sucuri SiteCheck - clean - Clean
ThreatHive - clean - Clean
URLhaus - clean - Clean
URLQuery - unrated - Clean
Viettel Threat Intelligence - clean - Clean
ViriBack - clean - Clean
VX Vault - clean - Clean
Xcitium Verdict Cloud - clean - Clean
Yandex Safebrowsing - clean - Clean
ZeroCERT - clean - Clean
ZeroFox - unrated - Clean

Security Scans

Browser Threat Feed

Not flagged on major threat lists

Checked against the browser threat feeds available to this scan — no hit.

03 · Domain & Infrastructure

Domain & infrastructure

Timeline · identity · encryption · redirects · hosting

The plumbing behind the site — who registered it, how it’s encrypted, where it’s hosted, and where it links out. A valid certificate or a calm server doesn’t mean the business is honest — scam sites pass these checks too. Use this to corroborate the verdict, not to overturn it.

Infrastructure map

How the saved page connected to the wider web.

Domainvatendimentosbr.shop

Redirects tovatendimentosbr.shop

Hosted byDigitalOcean, LLC

Referencestransparencyreport.google.com · funnel-rebuilder-magic.lovable.app

Contact Verification

Saved contact details can help identify the operator. Their presence supports traceability; it does not prove the business is trustworthy.

What We Found

No clear contact details on the page

Emails on site's domainNone

Phone numbersNone

Postal addressNot listed

Linked social profiles0

Signal Summary

Several contact red flags

No direct contact email found on the captured page.

Domain & Encryption

Encryption Certificate

StatusValid

ProtocolTLSv1.3

IssuerLet's Encrypt · YE2

ExpiresSep 13, 2026 (47d)

Self-signedNo

Hosting & Technology

HostingDigitalOcean, LLC

Server locationUS

Web servernginx

Redirect Chain

Hops

Cross-domain

Lookalike

Punycode

1301http://vatendimentosbr.shop/
2200https://vatendimentosbr.shop/

Server Reputation

Abuse Intelligence

Confidence score0%

Reports on file1

ISPDigitalOcean, LLC

Usage typeData Center/Web Hosting/Transit

Referenced Domains

Outbound domains this page links to or loads resources from. Each links to its own security scan.

transparencyreport.google.com funnel-rebuilder-magic.lovable.app a3t3nd1r.site

04 · Evidence Ledger

Evidence ledger

Coverage, provenance, and source freshness remain separate so a missing check is never mistaken for a clean result.

Completed analysis

The conclusion is supported by the evidence saved with this report.

Saved checks from Jul 28, 2026

AntiviruscompleteBrowser threat feedcompletePage contentcompleteAnalysiscompleteVisual evidencenot run

Technical threat

Malware, phishing, credential theft and hostile infrastructure.

malicious

Antivirus consensus

Operator / customer risk

Complaints, withdrawals, business conduct and commercial traps.

unknown

No confirmed evidence in this dimension.

Source coverage and freshness

Status shows whether usable evidence was saved; finding shows what that evidence observed.

Source coverage
Source	Result	Completion	Finding	Freshness
Antivirus	20 of 92 engines flagged	Completed	Adverse	fresh · Jul 28, 2026
Browser protection	No browser threat-list match	Completed	No adverse finding	Not available
Page content	Page fetched · HTTP 200	Completed	No adverse finding	Not available
Visual evidence	No usable visual evidence was saved	Unavailable	No saved finding	Not available
Independent research	Independent research was not available for this report	Unavailable	No saved finding	Not available

Antivirus: Result: 20 of 92 engines flagged; Completed; Adverse; Freshness: fresh · Jul 28, 2026
Browser protection: Result: No browser threat-list match; Completed; No adverse finding
Page content: Result: Page fetched · HTTP 200; Completed; No adverse finding
Visual evidence: Result: No usable visual evidence was saved; Unavailable; No saved finding
Independent research: Result: Independent research was not available for this report; Unavailable; No saved finding

05 · Your Next Move

Your next move

Avoid this site

Our automated review flagged enough risk that you should treat this site as unverified.

Do not interact with vatendimentosbr.shop
Do not enter credentials, deposit money, download files, or install browser extensions from this site.
Verify the business through independent channels
Check the company's social profiles, registry records, and search for recent news or reviews that are not hosted on the site itself.
Never use irreversible payment methods
Crypto, gift cards, wire transfers, and cash apps offer zero buyer protection. Use a credit card or PayPal if you must pay.
Share your experience
If you have additional context, drop a comment below or post on the MalwareTips forum.
Open

Safer Alternatives

Trying to shop safely? Use a safe option instead

Shopping for a deal? Stick to established retailers with real buyer protection — if a price looks too good to be true on an unknown store, it usually is.

Amazon

A-to-z Guarantee covers eligible orders.

eBay

Money Back Guarantee on most purchases.

Walmart

Major retailer with established returns.

The brand's official site

Search the brand name + "official site" rather than trusting an ad or unknown store.

Suggestions for safety only — not endorsements. Always verify the address bar before signing in or paying, even on well-known sites.

Final verdictLevel 5 of 5

14/100 safety

Dangerous

Phishing page impersonating a Brazilian CPF lookup service, flagged by 18 antivirus engines.

This is a phishing page that pretends to offer free CPF checks. Eighteen of 92 antivirus engines flagged it as malicious, with BitDefender, CyRadar, and others specifically calling it phishing.

01
18 of 92 antivirus engines flag the page as malicious, with BitDefender, CyRadar, and Emsisoft labeling it phishing.
02
External scripts loaded from funnel-rebuilder-magic.lovable.app and a3t3nd1r.site, domains not associated with official Brazilian services.
03
No contact information, business registration, or verifiable operator details present on the page.

Close the page and do not enter any personal or financial information. Use official Brazilian government channels for CPF queries.

Evidence balance8 signals

Positive: 3
Limited: 2
Risk: 3

Analysis coverage: 90%
Core capabilities: 4/5
Source coverage: 3/5
Evidence checks: 1/6

Technical threatDANGEROUS90/100 risk

Operator / customer riskNot confirmed50/100 risk

Safety range

DangerousDanger1–20High RiskHigh21–44Moderate RiskModerate45–69Low RiskLow70–84SafeSafe85–100

Saved evidence only. Missing checks are never treated as a clean result.

Scan another URL

06 · Community

Community

0 community contributions

Share what happened, what the site requested, and what others should watch for.

Community reviews never change the scanner verdict.

Loading…

Loading comments…

07 · Safety FAQ

Safety FAQ

Common questions, answered directly from the scan data above — so the answers reflect the saved verdict and evidence in this report.

Is vatendimentosbr.shop a scam or a legit website?

vatendimentosbr.shop is a high-risk scam site — avoid interacting with it. Our review tagged it for phishing and data harvester. 20 of 92 security engines flag it (18 as outright malicious). This pattern matches throwaway sites built to take money or data and disappear.

Is vatendimentosbr.shop safe to use?

No — vatendimentosbr.shop has a Safety Score of 14/100 (Dangerous) because decisive threat evidence was saved with this scan. Leave the site and do not log in, pay, download anything, or connect a wallet.

I already paid or entered my details on vatendimentosbr.shop — what should I do?

If you've already paid or handed over details on vatendimentosbr.shop, act quickly. 1) Contact your bank or card issuer immediately and ask to dispute the charge or open a chargeback — the sooner you act, the better your odds. 2) Report the site to the U.S. FTC at reportfraud.ftc.gov or the FBI's IC3 at ic3.gov, and in the UK to Action Fraud at actionfraud.police.uk. 3) If you entered a password, change it on vatendimentosbr.shop and anywhere you reused it, and turn on two-factor authentication. 4) Watch your bank and email for follow-up fraud, and keep screenshots as evidence.

Can I get my money back from vatendimentosbr.shop?

Often yes, if you act fast. Payments made by credit or debit card can frequently be reversed through a chargeback or dispute — contact your bank right away and explain it was a fraudulent site. Bank transfers and gift-card or voucher payments are much harder to recover, but you should still report them to your bank and to the FTC (reportfraud.ftc.gov) or Action Fraud (actionfraud.police.uk). Avoid any "refund" or "recovery" service that contacts you first — it's usually a follow-up scam.

Is my device at risk after visiting vatendimentosbr.shop?

Just viewing a scam page is usually low-risk on an up-to-date browser — the real danger is what it asks you to DO (enter details, download a file, send money). If you downloaded anything, run a full antivirus scan and treat the file as untrusted. If you entered a password or card number, change the password everywhere you reused it and contact your bank.

How do I report vatendimentosbr.shop?

You can report vatendimentosbr.shop through several official channels: the U.S. FTC at reportfraud.ftc.gov, the FBI's Internet Crime Complaint Center (IC3) at ic3.gov, and — in the UK — Action Fraud at actionfraud.police.uk. You can also flag it to Google Safe Browsing (safebrowsing.google.com/safebrowsing/report_phish) so other browsers warn about it, and report it to the company being impersonated if there is one. Reporting helps get scam sites taken down faster.

vatendimentosbr.shop looks professional — how can it still be a scam?

Modern scams are built to look convincing. A valid SSL padlock, a polished template, stock photos, fake reviews, and a trust badge can all be added in minutes and prove nothing about who runs the site. Scammers buy cheap domains, clone real designs, and copy legal pages wholesale. That's exactly why an automated review that checks the domain's age, hosting, blacklists, and behaviour — rather than just how the page looks — is more reliable than a first impression.

Has vatendimentosbr.shop been flagged by antivirus engines?

Yes. 20 of 92 antivirus and blocklist engines in our malware network flagged vatendimentosbr.shop, 18 of them as outright malicious. Even a single detection from a reputable engine is a meaningful warning, and multiple detections rarely happen by accident.

Is vatendimentosbr.shop on any phishing or malware blacklists?

No — vatendimentosbr.shop is not currently on the major browser blocklist feeds that Chrome, Safari, Firefox, and Edge rely on. Note that blocklists can lag behind brand-new scam domains, so "not listed" is reassuring but not a guarantee on its own.

Where is vatendimentosbr.shop hosted?

vatendimentosbr.shop resolves to an IP operated by DigitalOcean, LLC in US (Data Center/Web Hosting/Transit). Hosting location alone doesn't make a site good or bad — but hosting that doesn't match a brand's claimed country, or that sits on networks known for abuse, is one of the many signals we weigh alongside the verdict above.

How often is the vatendimentosbr.shop report updated?

This report is a record of the scan run on July 28, 2026, and the verdict reflects that point in time. Scam sites change fast — they can go live, get flagged, or vanish within days — so if you believe something about vatendimentosbr.shop has changed, MalwareTips staff can run a fresh scan that re-checks every signal from scratch and republishes an updated verdict.