Verdict
tcu.gov.br appears legitimate.
Our checks found nothing pointing to fraud. Ordinary care still applies when you pay or sign in.
| What this site appears to be | Official portal of Brazil's Tribunal de Contas da União (TCU) providing public auditing information, news, services (certificates, protocols), jurisprudence, contact details and resources for citizens. The site includes accessibility features and channels for denouncements and information requests. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | None flagged itVirusTotal | Clear |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0 reportsAbuseIPDB; shared hosting inflates this count | Noted |
| Domain age | 30 years oldRegistered history | Clear |
| Web archive | Never archivedNo public history of this site | Watch |
| Certificate | Encrypted connectionIssued by Thawte TLS RSA CA G1 | Noted |
The page as captured
No screenshot is retained for this report.
Key findings
- Automated classification: Not Scam.
- Domain age: more than 10 years (registration continuity).
- No flags from the reputation services TrustSniffer consulted at assessment time.
- The operator behind the site could not be independently connected to a real-world brand or person.
Full analysis
Overview
This website is a public-sector information portal for Brazil’s Tribunal de Contas da União (TCU), presenting auditing and accountability information, institutional news, jurisprudence, certificates, protocols, transparency resources, accessibility features, and citizen contact channels rather than commercial products or deposit-taking services.
Scam/Impersonation Risk
No contradictions were observed. The available evidence shows no phishing, impersonation, blacklist, malicious-content, or suspicious behavioral indicators, and the site does not present a sensitive login or payment workflow. Its public-service content, including denouncement, information-request, and contact functions, is consistent with the stated governmental purpose. The real-world operator identity is not independently verified, so the institutional presentation should be treated as evidence-consistent rather than conclusive proof of ownership.
- The homepage identifies the Tribunal de Contas da União and links to “Sobre o TCU,” transparency, jurisprudence, citizen services, “Fale conosco,” “Denuncie,” and “Acesso à informação.”
- The site’s transport certificate identifies the subject organisation as “TRIBUNAL DE CONTAS DA UNIAO,” providing technical alignment with the institutional identity presented on the pages.
- External reputation checks recorded zero malicious and zero suspicious detections, with no blacklist or phishing hit; the site’s published pages contained no red flags.
- Domain registration: 1996-04-10 (~30.36 years old).
Regulatory Verification Notes
The site presents a clear public-sector purpose and provides institutional, transparency, accountability, and citizen-service material. Licensing is not the relevant operating model for the informational portal described; nevertheless, the available evidence does not independently establish the real-world operator beyond the site’s own institutional presentation. The site’s long-established registration, clean external reputation, government-domain context, and technically attributable hosting support an established-site assessment, while the available regulatory evidence should not be interpreted as a separate legal or licensing certification.
- Hosted on AS263857, identified as “Tribunal de Contas da Uniao, BR,” with LACNIC as the registry and Brazil as the hosting country.
- TLS certificate issued by Thawte TLS RSA CA G1 at OV validation level, valid to 2026-09-29T23:59:59+00:00.
- The homepage and institutional navigation expose “Sobre o TCU,” authorities, governance, transparency and accountability, public services, and official contact and information-access channels.
- The site is classified as a government/public-service portal and describes no monetization, deposit solicitation, or commercial investment activity.
What to Verify Next
Before any credential or payment interaction associated with a linked service, the institutional affiliation should be confirmed through an independently accessed Brazilian government directory or other offline-established official channel. Any submission of personal information should be limited to the stated citizen-service purpose, and service-specific privacy, retention, and response arrangements should be reviewed where available. If a transaction or account function is encountered outside the public-service scope described here, its merchant identity, payment protections, and applicable terms should be checked independently.
- The site provides “Fale conosco,” “Ouvidoria,” “Dúvidas processuais,” “Denuncie,” and “Acesso à informação” channels that can be compared with independently sourced institutional contact details.
- The observed forms consist of a newsletter function and a contact/denouncement form; no sensitive login form or untrusted form destination was detected.
- The portal offers accessibility controls, multilingual navigation, transparency resources, certificates, protocols, and jurisprudence services consistent with a public-information workflow.
Summary Verdict
The overall posture is high trust and low risk, and the available evidence is consistent with an established, apparently legitimate government information portal. No scam or impersonation contradictions were identified, although the operator’s real-world identity remains independently unverified.
Infrastructure Integrity
The site resolves to a single directly attributable hosting address on AS263857, with no CDN detected and no separate edge-IP layer identified. This direct hosting arrangement improves network attribution; infrastructure characteristics remain a mitigating technical signal rather than proof of institutional legitimacy.
Closing Assessment
Routine informational use is proportionate, while any unexpected request for credentials, payment, or unusually sensitive information should be subjected to independent institutional and transaction-protection checks before proceeding.
Written analysis generated 2026-08-13 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
No rule findings contributed to this verdict.
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 55/100 |
| Identity verification confidence | 60% |
- Identity verified on page
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of tcu.gov.br.
- The request resolved to portal.tcu.gov.br, a subdomain of tcu.gov.br. Noted
- DNS for this domain is served by awsdns-19.com, across 4 name servers. Noted
- It is hosted on AS263857, from a server in BR. Noted
Domain intelligence
| Registrar | Not available |
|---|---|
| Hosting | AS263857 - Tribunal de Contas da Uniao, BR |
| Country | BR |
| Server IP | 138.186.98.200 |
| Name servers | ns-157.awsdns-19.com, ns-1819.awsdns-35.co.uk, ns-667.awsdns-19.net, ns-1040.awsdns-02.org |
| SSL issuer | Thawte TLS RSA CA G1 |
| SSL expiry | 2026-09-29 |
| Domain age | 30.36 years (continuous registration) |
| Domain expiry | Not available |
| Archive first seen | Not available |
| Archive snapshots | 0 |
| Reputation | VirusTotal: 0 flagged | AbuseIPDB: 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about tcu.gov.br at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.