Is creditis.com.br legit? TrustSniffer's high-trust assessment: 80/100

Overview

The website is a Brazilian financial-product marketplace that compares credit cards, organizes offers by customer profile and benefits, publishes educational material, and directs prospective applicants toward products offered by banks and retailers, apparently operating through referral or lead-generation relationships.

Scam/Impersonation Risk

No identity contradictions, phishing indicators, brand impersonation, or confirmed malicious reputation signals were observed. Its multi-year domain history and consistent archival record support continuity rather than recent repurposing, while external threat checks found no malicious or suspicious classifications. The homepage also expressly warns that the business does not request deposits or advance payments, which provides visitors with a clear reference point for recognizing fraudulent approaches made in its name.

• The domain record shows registration on 6 July 2021 (~5.08 years old), with expiry on 6 July 2027.
• The web archive contains 62 snapshots spanning 3 December 2021 to 16 March 2026, covering 6 tracked years with no gap exceeding one year.
• Homepage analysis detected no login form, hidden forms, suspicious inline scripts, cloaking, clipboard interference, or cryptocurrency-wallet behavior.
• External reputation checks recorded 0 malicious and 0 suspicious classifications, no safe-browsing alert, no external threat listing, and no reported abuse.

Regulatory Verification Notes

The homepage provides a legal owner, a Brazilian corporate-registration identifier (CNPJ), stated banking-correspondent relationships, and references to privacy and contractual terms. These disclosures establish a credible commercial identity and clarify that the site acts as an intermediary rather than a card issuer. No licensing claim, licensing authority, or licence number was identified in the supplied pages; given the marketplace model, this is a limited disclosure-verification point rather than evidence of misconduct. No matching broker-reputation record was found, but that result carries no implication regarding legal authorization.

• The homepage identifies corporate ownership, a CNPJ, and authorized correspondent relationships with financial institutions.
• The homepage presents comparison and referral services rather than claiming to issue credit directly.
• The site is served from AS396982 (Google Cloud Platform — Google LLC, US).
• The site’s transport encryption uses a WR3-issued domain-validated TLS certificate, valid to 16 September 2026.

What to Verify Next

Before completing a referred application, the destination should be confirmed as an official channel of the named issuing institution, and the issuer’s current fees, eligibility criteria, interest terms, benefits, and privacy notices should be reviewed independently. Any information entered into the profile-matching tool should be limited to what is necessary for product selection, with the applicable privacy terms reviewed before submission. For institutional onboarding or a formal commercial relationship, the stated CNPJ and correspondent status should be confirmed through the relevant official Brazilian records.

• The homepage lists offers associated with multiple banks and retailers, making destination-by-destination validation relevant.
• The site provides a profile-based card questionnaire and an email-newsletter form.
• Neither observed form was classified as sensitive, and no untrusted submission destination was detected.
• The homepage references privacy and terms materials applicable to the site’s comparison and referral functions.

Summary Verdict

The site presents as a legitimate, established, and trustworthy financial-product comparison service. Its identity, operating model, historical continuity, technical controls, and clean reputation converge without contradictory signals. Normal interaction, including account login where offered and standard use, is appropriate.

Infrastructure Integrity

The site uses Cloudflare CDN/WAF protection, with the observed address operating as an edge endpoint and the underlying origin shielded from direct exposure. This reduces direct attack surface and supports operational resilience, although protective infrastructure is a mitigating security control rather than independent proof of legitimacy.

Closing Assessment

Prospective users may proceed with normal use, applying ordinary care when transitioning from comparison content to a third party’s application process.