---
title: "Is cartaoatacadao.com.br Legit? Trust Score 80/100"
source: TrustSniffer
type: Website trust & fraud report
subject: "cartaoatacadao.com.br"
verdict: "High Trust"
title: "Is cartaoatacadao.com.br Legit? Trust Score 80/100"
trust_score: 80
classification_confidence: 55
canonical_url: https://trustsniffer.com/report/cartaoatacadao.com.br
assessed: 2026-08-04
---

# Is cartaoatacadao.com.br legit? TrustSniffer's high-trust assessment: 80/100

## Verdict


**Verdict: High Trust, trust score 80/100.** cartaoatacadao.com.br appears legitimate.

Our checks found nothing pointing to fraud. Ordinary care still applies when you pay or sign in.

Labels: Not Scam, Low Risk

Assessed 2026-08-04 by automated analysis. Classification confidence 55%.

| Field | Value |
| --- | --- |
| What this site appears to be | Página oficial aparente do Cartão Atacadão, operado pelo Banco CSF, promovendo cartão de crédito, descontos, parcelamentos, aplicativo, empréstimos, seguros e serviços relacionados. Exibe CNPJ, endereço físico, contratos, tarifas, políticas, ouvidoria e canais de atendimento, sem sinais explícitos de phishing ou promessas financeiras enganosas no conteúdo fornecido. |

## Evidence status and limitations


Evidence completeness: UNKNOWN

- Module-level completeness metadata is unavailable for this legacy report.

## At a glance

The checks that decide most of this verdict.

| Check | Result | Status |
| --- | --- | --- |
| Malware engines | None flagged it (VirusTotal) | Clear |
| Google Safe Browsing | Not listed (Google) | Clear |
| Abuse reports on the host | 0 reports (AbuseIPDB; shared hosting inflates this count) | Noted |
| Domain age | 11 years old (Registered history) | Clear |
| Web archive | Never archived (No public history of this site) | Watch |
| Certificate | Encrypted connection (Issued by WE1) | Noted |

## The page as captured


No screenshot is retained for this report.

## Key findings


- Automated classification: Not Scam.
- Domain age: more than 10 years (registration continuity).
- No flags from the reputation services TrustSniffer consulted at assessment time.
- The operator behind the site could not be independently connected to a real-world brand or person.

## Full analysis


### Overview

The website is the institutional and promotional portal for Cartão Atacadão, presenting a consumer credit-card offering and related financial services operated by Banco CSF, with revenue apparently derived from card usage, interest, fees, and insurance products.


### Scam/Impersonation Risk

No identity contradictions, phishing indicators, brand impersonation, malicious reputation findings, or other confirmed scam signals were observed. The domain is long-established, carries a meaningful global traffic footprint, and is registered to Carrefour Comércio e Indústria Ltda. Interactive testing identified no hidden forms, credential forwarding, cloaking, wallet-related activity, clipboard manipulation, or suspicious scripts. These mutually reinforcing identity, reputation, and behavioural signals support the conclusion that this is a legitimate website.

- The domain registration record identifies Carrefour Comércio e Indústria Ltda and shows registration in 2015 (~11.04 years old), with expiry on 24 July 2027.
- The homepage identifies the service as Cartão Atacadão operated by Banco CSF and presents an internally consistent institutional identity.
- External reputation checks recorded 0 malicious and 0 suspicious detections, no search-browsing safety hit, no reported abuse, and inclusion within the global top one million at rank 175,815.
- Behaviour observed on the homepage showed no login form, hidden form, external password form, cloaking, suspicious inline script, or brand-impersonation indicator.

### Regulatory Verification Notes

The site provides substantial financial-services disclosure, including a corporate identifier, physical address, contracts, tariff information, policies, complaints handling, security guidance, and customer-service channels. Its offerings extend beyond the core credit card to personal loans, cash advances, bill payment, insurance products, prize-linked promotions, and account-management services; these products carry ordinary consumer-credit, interest, fee, insurance-coverage, and promotion-eligibility considerations. The supplied pages do not establish a specific regulatory authorization or license number, so regulatory status remains a disclosure-verification matter rather than a legitimacy concern. No matching broker-reputation entry was identified, but that result is not determinative of legal or regulatory standing.

- The homepage and linked institutional material identify Banco CSF and expose contracts, tariff schedules, privacy policies, a physical address, a corporate registration identifier, an ombudsman function, and service channels.
- The homepage advertises exclusive store discounts, instalment purchasing, personal credit, insurance, cash withdrawal, bill payment, mobile recharge, protected-invoice products, and prize draws, including a stated R$100,000 prize.
- The site’s transport encryption uses a DV certificate issued by WE1, valid until 25 August 2026.
- The site is served from AS13335 by Cloudflare, Inc., United States.

### What to Verify Next

Before entering a material credit or insurance commitment, the applicant should confirm Banco CSF’s current authorization directly with the relevant official registry, compare the applicable contract and tariff schedule with the terms shown during onboarding, and retain the final pre-contract disclosures. Promotion rules, insurance exclusions, effective interest costs, and repayment obligations should be reviewed before acceptance. Customer-service details should be independently confirmed before acting on unsolicited messages that reference the brand.

- The contracts and tariff materials provide the documentary basis for comparing fees, interest obligations, and final application terms.
- The insurance pages cover several distinct products, making policy exclusions, insured events, waiting periods, and cancellation provisions transaction-specific.
- The homepage publishes an official WhatsApp assistant number for balance, limit, billing-cycle, and transaction information, providing a reference point for validating branded communications.
- The site provides dedicated security guidance and an ombudsman channel for escalation and complaint handling.

### Summary Verdict

The website has a high-trust posture and reads as an established, legitimate financial-services presence. Its consistent institutional identity, mature domain provenance, substantive consumer documentation, clean external reputation, and benign observed behaviour converge without contradictory signals.


### Infrastructure Integrity

Cloudflare provides the site’s CDN and WAF layer, with both observed addresses operating as edge endpoints and no direct origin address exposed during analysis. This arrangement reduces direct infrastructure exposure and is a useful security control, although protective hosting alone is not evidence of legitimacy.


### Closing Assessment

Normal interaction, including account login, application activity, account servicing, and standard transactions, is appropriate, subject to ordinary review of contractual terms before accepting a financial commitment.


_Written analysis generated 2026-08-04 by the TrustSniffer Analysis Engine from the evidence in this report._

## What the analysis found


No rule findings contributed to this verdict.

## Identity verification


| Field | Value |
| --- | --- |
| Status | UNVERIFIED |
| Identity score | 30/100 |
| Identity verification confidence | 50% |

- No on-site identity signals detected

_Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence._

## What TrustSniffer observed

First-party facts recorded during the assessment of cartaoatacadao.com.br.

- The request stayed on cartaoatacadao.com.br. It was not redirected to another domain. (Clear)
- DNS for this domain is served by cloudflare.com, across 2 name servers. (Noted)
- The registration is paid up to 2027-07-24. (Noted)
- It is hosted on CLOUDFLARENET, from a server in US. (Noted)

## Domain intelligence


| Field | Value |
| --- | --- |
| Registrar | Not available |
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 104.18.0.192 |
| Name servers | osmar.ns.cloudflare.com, sneh.ns.cloudflare.com |
| SSL issuer | WE1 |
| SSL expiry | 2026-08-25 |
| Domain age | 11.0 years |
| Domain expiry | 2027-07-24 |
| Archive first seen | Not available |
| Archive snapshots | 0 |
| Reputation | VirusTotal: 0 flagged \| AbuseIPDB: 0 reports \| Google Safe Browsing: 0 matches |

## About this assessment


A trust score summarises the evidence TrustSniffer could collect about cartaoatacadao.com.br at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.

TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.

## Related on TrustSniffer
- [jtexpress.com.br risk report](https://trustsniffer.com/report/jtexpress.com.br) (High Trust, 100/100)
- [mensagemaniversario.com.br risk report](https://trustsniffer.com/report/mensagemaniversario.com.br) (High Trust, 76/100)
- [dicionariodenomesproprios.com.br risk report](https://trustsniffer.com/report/dicionariodenomesproprios.com.br) (High Trust, 95/100)
- [softwareexpress.com.br risk report](https://trustsniffer.com/report/softwareexpress.com.br) (High Trust, 80/100)
- [homehost.com.br risk report](https://trustsniffer.com/report/homehost.com.br) (High Trust, 90/100)
- [posthaus.com.br risk report](https://trustsniffer.com/report/posthaus.com.br) (High Trust, 100/100)
- [cartaotorra.com.br risk report](https://trustsniffer.com/report/cartaotorra.com.br) (High Trust, 80/100)
- [blogg.se risk report](https://trustsniffer.com/report/blogg.se) (High Trust, 90/100)
- [globalnews.ca risk report](https://trustsniffer.com/report/globalnews.ca) (High Trust, 90/100)
- [myradioenvivo.ar risk report](https://trustsniffer.com/report/myradioenvivo.ar) (High Trust, 95/100)
- [Every website and wallet TrustSniffer has assessed](https://trustsniffer.com/directory)
- [Other domains assessed as legitimate](https://trustsniffer.com/directory/verified-legit)
- [Check another website](https://trustsniffer.com/web-intelligence)
- [Check a crypto wallet address](https://trustsniffer.com/on-chain-risk)
- [The TrustSniffer Risk Index](https://trustsniffer.com/stats)

## Guides
- [Stablecoin Freezes, Sep 27, 2026: 3 Wallets](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-09-27)
- [How We See USDT Wallet Freezes Coming](https://trustsniffer.com/blog/how-trustsniffer-sees-usdt-wallet-freezes-coming)
- [Stablecoin Freezes, Sep 26, 2026: 1 Wallet](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-09-26)

---
*Source: [TrustSniffer](https://trustsniffer.com/report/cartaoatacadao.com.br) — independent automated trust & fraud analysis. Cite as https://trustsniffer.com/report/cartaoatacadao.com.br · assessed 2026-08-04.*