Trust score
52 / 100
The trust score combines technical checks, reputation signals where available, website history cues, scam intelligence, and AI-assisted analysis.
Signals behind your score
Limited verification
Availability: reachable · Website responded. (HTTP 200)
Inspection: full · dns=true · tls=false · botProtection=false · parserFailure=false · contentLength=39873
Matches from scam intelligence
Serious matches from known phishing, malware, or public scam-warning sources. Provider names appear below each row.
No known phishing, malware, or police-aligned scam warnings were found in this scan.
Detected risk patterns
Additional patterns worth a closer look before you pay or sign in—not proof on their own.
No additional prioritized risk rows were raised beyond curated list matches.
Helpful signals & observations
Supporting checks in plain language. “Not found” means we did not see a report in that source during this scan.
Subdomain submitted; root registration also checked
The submitted host obravisao.vhapps.com.br is a subdomain. Fraudly checks RDAP/domain-age on vhapps.com.br because ownership and registration belong to the registrable root domain.
Source: Fraudly hostname analysisSource reliability: high
No police list match found
No direct domain match was found on the public police trader-warning list checked in this scan.
Source: Dutch Police (public pages)Source reliability: low
Check unavailable
RDAP lookup overrun or error: RDAP provider timed out after 2500ms
Source: RDAPSource reliability: low
Check unavailable
OpenPhish overrun or error: OpenPhish provider timed out after 2000ms
Source: OpenPhishSource reliability: low
Check unavailable
URLhaus overrun or error: URLhaus provider timed out after 2000ms
Source: URLhausSource reliability: low
Check unavailable
TLS check overrun or error: TLS provider timed out after 1500ms
Source: TLSSource reliability: low
Domain & registration
The submitted address is a subdomain. Fraudly also checked the registered domain because domain age and ownership belong to the root domain.
- Checked URL/hostname: obravisao.vhapps.com.br
- Registered domain: vhapps.com.br
- Registration date: unknown
- Domain age: Not available
- Registrar: unknown
- Country: unknown
- Expiration date: unknown
- Privacy / redacted ownership hints: no / unknown
- Subdomain analysis: No high-risk wording detected in subdomain labels.
Source: RDAP (rdap.org)
Redirect analysis
- Original URL: https://obravisao.vhapps.com.br/
- Final URL: https://obravisao.vhapps.com.br/
- Final domain: obravisao.vhapps.com.br
- Redirect count: 0
- Crossed registrable domain: no
Security checks (HTTPS / certificates)
- HTTPS/TLS reachable: no
- Certificate trusted in probe: no
- Possibly self-signed / untrusted: no / unknown
- Issuer: unknown
- Expiry: unknown
Source: TLS certificate check
Technical source details
Raw provider names (OpenPhish, URLhaus, Google Web Risk, RDAP, etc.) for this scan. “Matched” means that source reported something relevant.
Subdomain submitted; root registration also checkeddomainno match
The submitted host obravisao.vhapps.com.br is a subdomain. Fraudly checks RDAP/domain-age on vhapps.com.br because ownership and registration belong to the registrable root domain.
Source: Fraudly hostname analysis · severity: info · reliability: high
No Police page string matchgovernmentno match
No direct domain string overlap was detected in lightly cached excerpts of the referenced politie.nl pages. Missing a hit is not proof a shop is trustworthy.
Source: Dutch Police (public pages) · severity: info · reliability: low
Check unavailabledomainno match
RDAP lookup overrun or error: RDAP provider timed out after 2500ms
Source: RDAP · severity: info · reliability: low
Check unavailablephishingno match
OpenPhish overrun or error: OpenPhish provider timed out after 2000ms
Source: OpenPhish · severity: info · reliability: low
Check unavailablemalwareno match
URLhaus overrun or error: URLhaus provider timed out after 2000ms
Source: URLhaus · severity: info · reliability: low
Check unavailablesslno match
TLS check overrun or error: TLS provider timed out after 1500ms
Source: TLS · severity: info · reliability: low
Reputation enrichment
Optional broader reputation pass when available—beyond the quick baseline probes.
No enriched reputation profile surfaced. That limits context; it does not prove the site is unsafe.
Quick review probes (baseline scan)
Lightweight directory checks powering part of the model—hiccups here describe our snapshot, not the shop’s honesty.
Trustpilot · Unavailable
Not availableTrustpilot
No public reviews found
Checked, no public reviews found
Google Reviews · Couldn’t confirm this match
Limited infoGoogle Reviews
We found possible reviews, but we couldn’t be sure they belong to this exact website.
We found possible reviews, but we couldn’t be sure they belong to this exact website.
Couldn’t confirm this match
- No reliable public review data found
No independent customer review data could be verified, indicating a lack of public feedback.
- Public review data unavailable for this check.
Source availability (neutral)
- Third-party Trustpilot snapshot: snapshot unavailable in this crawl (limits confidence only).
Raw review snapshots
Trustpilot raw snapshot: not available in current payload.
Google reviews raw snapshot: not available in current payload.
Fulfillment signals
Dropshipping: unlikely · China-linked fulfillment: unlikely · Local stock/production: unlikely · Confidence low · Score nudge: 0
- Marketplace terms detected: unlikely
- Third-party seller language detected: unlikely
- Cross-border shipping detected: unlikely
- Supplier fulfillment detected: unlikely
- Separate shipment language detected: unlikely
- International shipping detected: unlikely
- Fulfillment confidence: low · Fulfillment score nudge: 0
- Corpus: 2 segments / 7499 chars · version: fulfillment-v2-marketplace · matched: none
- No strong supply-chain signals detected in snippet.
Scoring detail (advanced)
Composite model uses raw impacts × confidence weights on the server. Positive numbers push the risk score up; negative numbers pull it down. Neutral rows are explanatory only — they must not be read as endorsement.
Applied trust-score cap after identity guardrails: 76/100 displayed trust.
Combined scoring signals (reviews, reputation, feeds, fulfillment…)
Trust-positive signals
- Contact information available (-3 raw · medium confidence) — A contact or reach-us section appears on the site.
- Business name presence (-3 raw · medium confidence) — References Vhapps.
Website & technical observations
- No matched Google listing (+0 raw · high confidence) — No Google Places listing matched this domain; review impact is neutral (not a penalty).
Detected risk patterns
- Unusually long domain (+10 raw · medium confidence) — The hostname is unusually long, which is common in phishing or throwaway shops.
- Many hostname labels (+10 raw · medium confidence) — Extra hostname segments can be used to mimic trusted brands.
- No clear business address on shop pages (+14 raw · medium confidence) — Enough shop text was captured but no obvious business or return address was found—this matters more when you may pay or share delivery details.
- Business legitimacy caution (+5 raw · low confidence) — Commercial shop detected with very few policy or legal pages visible.
- No reliable HTTPS endpoint (+22 raw · high confidence) — Port 443 probe did not complete a TLS session.
Incomplete or unavailable data
- Domain registration age unavailable (+0 raw · low confidence) — Domain registration age could not be verified during this scan. Some registries temporarily limit or omit registration data. This does not mean the website is suspicious, and it was not treated as a risk signal.
- Domain ownership could not be verified from public registration data (+1 raw · low confidence) — WHOIS/RDAP did not expose corroboratable registrant signals in this crawl. That is common and mainly reduces how confidently we can score—not evidence of impersonation by itself.
Scam intelligence weighting (model)
Detected risk patterns
- No reliable HTTPS endpoint (+22 raw · high confidence) — Port 443 probe did not complete a TLS session. · TLS certificate check
Review collector notes (neutral)
Buckets distinguish provider errors, source outages, review-derived signals, and (rare) website crawler transparency—never merged with fraud intel.
- trustpilot_public · source_unavailable: Third-party Trustpilot snapshot: snapshot unavailable in this crawl (limits confidence only).
Key factors explained
Blended notes from patterns we detected, scam intelligence scoring, and optional AI assistance—not legal or financial advice.
- AI risk signal: medium
- The domain name is unusually long, which is common in phishing patterns.
- Multiple subdomains detected, which can be used to imitate trusted brands.
AI model used in this run: yes
