---
title: "Is tcu.gov.br Legit? Trust Score 100/100"
source: TrustSniffer
type: Website trust & fraud report
subject: "tcu.gov.br"
verdict: "High Trust"
title: "Is tcu.gov.br Legit? Trust Score 100/100"
trust_score: 100
classification_confidence: 55
canonical_url: https://trustsniffer.com/report/tcu.gov.br
assessed: 2026-08-13
---

# Is tcu.gov.br legit? TrustSniffer's high-trust assessment: 100/100

## Verdict


**Verdict: High Trust, trust score 100/100.** tcu.gov.br appears legitimate.

Our checks found nothing pointing to fraud. Ordinary care still applies when you pay or sign in.

Labels: Not Scam, Low Risk

Assessed 2026-08-13 by automated analysis. Classification confidence 55%.

| Field | Value |
| --- | --- |
| What this site appears to be | Official portal of Brazil's Tribunal de Contas da União (TCU) providing public auditing information, news, services (certificates, protocols), jurisprudence, contact details and resources for citizens. The site includes accessibility features and channels for denouncements and information requests. |

## Evidence status and limitations


Evidence completeness: UNKNOWN

- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.

## At a glance

The checks that decide most of this verdict.

| Check | Result | Status |
| --- | --- | --- |
| Malware engines | None flagged it (VirusTotal) | Clear |
| Google Safe Browsing | Not listed (Google) | Clear |
| Abuse reports on the host | 0 reports (AbuseIPDB; shared hosting inflates this count) | Noted |
| Domain age | 30 years old (Registered history) | Clear |
| Web archive | Never archived (No public history of this site) | Watch |
| Certificate | Encrypted connection (Issued by Thawte TLS RSA CA G1) | Noted |

## The page as captured


No screenshot is retained for this report.

## Key findings


- Automated classification: Not Scam.
- Domain age: more than 10 years (registration continuity).
- No flags from the reputation services TrustSniffer consulted at assessment time.
- The operator behind the site could not be independently connected to a real-world brand or person.

## Full analysis


### Overview

This website is a public-sector information portal for Brazil’s Tribunal de Contas da União (TCU), presenting auditing and accountability information, institutional news, jurisprudence, certificates, protocols, transparency resources, accessibility features, and citizen contact channels rather than commercial products or deposit-taking services.


### Scam/Impersonation Risk

No contradictions were observed. The available evidence shows no phishing, impersonation, blacklist, malicious-content, or suspicious behavioral indicators, and the site does not present a sensitive login or payment workflow. Its public-service content, including denouncement, information-request, and contact functions, is consistent with the stated governmental purpose. The real-world operator identity is not independently verified, so the institutional presentation should be treated as evidence-consistent rather than conclusive proof of ownership.


Evidence:
- The homepage identifies the Tribunal de Contas da União and links to “Sobre o TCU,” transparency, jurisprudence, citizen services, “Fale conosco,” “Denuncie,” and “Acesso à informação.”
- The site’s transport certificate identifies the subject organisation as “TRIBUNAL DE CONTAS DA UNIAO,” providing technical alignment with the institutional identity presented on the pages.
- External reputation checks recorded zero malicious and zero suspicious detections, with no blacklist or phishing hit; the site’s published pages contained no red flags.
- Domain registration: 1996-04-10 (~30.36 years old).

### Regulatory Verification Notes

The site presents a clear public-sector purpose and provides institutional, transparency, accountability, and citizen-service material. Licensing is not the relevant operating model for the informational portal described; nevertheless, the available evidence does not independently establish the real-world operator beyond the site’s own institutional presentation. The site’s long-established registration, clean external reputation, government-domain context, and technically attributable hosting support an established-site assessment, while the available regulatory evidence should not be interpreted as a separate legal or licensing certification.


Evidence:
- Hosted on AS263857, identified as “Tribunal de Contas da Uniao, BR,” with LACNIC as the registry and Brazil as the hosting country.
- TLS certificate issued by Thawte TLS RSA CA G1 at OV validation level, valid to 2026-09-29T23:59:59+00:00.
- The homepage and institutional navigation expose “Sobre o TCU,” authorities, governance, transparency and accountability, public services, and official contact and information-access channels.
- The site is classified as a government/public-service portal and describes no monetization, deposit solicitation, or commercial investment activity.

### What to Verify Next

Before any credential or payment interaction associated with a linked service, the institutional affiliation should be confirmed through an independently accessed Brazilian government directory or other offline-established official channel. Any submission of personal information should be limited to the stated citizen-service purpose, and service-specific privacy, retention, and response arrangements should be reviewed where available. If a transaction or account function is encountered outside the public-service scope described here, its merchant identity, payment protections, and applicable terms should be checked independently.


Evidence:
- The site provides “Fale conosco,” “Ouvidoria,” “Dúvidas processuais,” “Denuncie,” and “Acesso à informação” channels that can be compared with independently sourced institutional contact details.
- The observed forms consist of a newsletter function and a contact/denouncement form; no sensitive login form or untrusted form destination was detected.
- The portal offers accessibility controls, multilingual navigation, transparency resources, certificates, protocols, and jurisprudence services consistent with a public-information workflow.

### Summary Verdict

The overall posture is **high trust and low risk**, and the available evidence is consistent with an established, apparently legitimate government information portal. No scam or impersonation contradictions were identified, although the operator’s real-world identity remains independently unverified.


### Infrastructure Integrity

The site resolves to a single directly attributable hosting address on AS263857, with no CDN detected and no separate edge-IP layer identified. This direct hosting arrangement improves network attribution; infrastructure characteristics remain a mitigating technical signal rather than proof of institutional legitimacy.


### Closing Assessment

Routine informational use is proportionate, while any unexpected request for credentials, payment, or unusually sensitive information should be subjected to independent institutional and transaction-protection checks before proceeding.


_Written analysis generated 2026-08-13 by the TrustSniffer Analysis Engine from the evidence in this report._

## What the analysis found


No rule findings contributed to this verdict.

## Identity verification


| Field | Value |
| --- | --- |
| Status | UNVERIFIED |
| Identity score | 55/100 |
| Identity verification confidence | 60% |

- Identity verified on page

_Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence._

## What TrustSniffer observed

First-party facts recorded during the assessment of tcu.gov.br.

- The request resolved to portal.tcu.gov.br, a subdomain of tcu.gov.br. (Noted)
- DNS for this domain is served by awsdns-19.com, across 4 name servers. (Noted)
- It is hosted on AS263857, from a server in BR. (Noted)

## Domain intelligence


| Field | Value |
| --- | --- |
| Registrar | Not available |
| Hosting | AS263857 - Tribunal de Contas da Uniao, BR |
| Country | BR |
| Server IP | 138.186.98.200 |
| Name servers | ns-157.awsdns-19.com, ns-1819.awsdns-35.co.uk, ns-667.awsdns-19.net, ns-1040.awsdns-02.org |
| SSL issuer | Thawte TLS RSA CA G1 |
| SSL expiry | 2026-09-29 |
| Domain age | 30.36 years (continuous registration) |
| Domain expiry | Not available |
| Archive first seen | Not available |
| Archive snapshots | 0 |
| Reputation | VirusTotal: 0 flagged \| AbuseIPDB: 0 reports \| Google Safe Browsing: 0 matches |

## About this assessment


A trust score summarises the evidence TrustSniffer could collect about tcu.gov.br at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.

TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.

## Related on TrustSniffer
- [bndes.gov.br risk report](https://trustsniffer.com/report/bndes.gov.br) (High Trust, 100/100)
- [educacao.mg.gov.br risk report](https://trustsniffer.com/report/educacao.mg.gov.br) (High Trust, 100/100)
- [bnb.gov.br risk report](https://trustsniffer.com/report/bnb.gov.br) (High Trust, 100/100)
- [rio.rj.gov.br risk report](https://trustsniffer.com/report/rio.rj.gov.br) (High Trust, 90/100)
- [escolavirtual.gov.br risk report](https://trustsniffer.com/report/escolavirtual.gov.br) (High Trust, 100/100)
- [sso.acesso.gov.br risk report](https://trustsniffer.com/report/sso.acesso.gov.br) (High Trust, 90/100)
- [cidadao.mg.gov.br risk report](https://trustsniffer.com/report/cidadao.mg.gov.br) (High Trust, 90/100)
- [kisiiuniversity.ac.ke risk report](https://trustsniffer.com/report/kisiiuniversity.ac.ke) (High Trust, 90/100)
- [paystack.com risk report](https://trustsniffer.com/report/paystack.com) (High Trust, 100/100)
- [hostcenter.co.kr risk report](https://trustsniffer.com/report/hostcenter.co.kr) (High Trust, 90/100)
- [Every website and wallet TrustSniffer has assessed](https://trustsniffer.com/directory)
- [Other domains assessed as legitimate](https://trustsniffer.com/directory/verified-legit)
- [Check another website](https://trustsniffer.com/web-intelligence)
- [Check a crypto wallet address](https://trustsniffer.com/on-chain-risk)
- [The TrustSniffer Risk Index](https://trustsniffer.com/stats)

## Guides
- [Stablecoin Freezes Sep 25, 2026: 8 Wallets](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-09-25)
- [VietinBank Phishing: Spotting Domain Impersonation](https://trustsniffer.com/blog/vietinbank-phishing-domain-impersonation)
- [Stablecoin Freezes, Sep 24, 2026: 26 Wallets](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-09-24)

---
*Source: [TrustSniffer](https://trustsniffer.com/report/tcu.gov.br) — independent automated trust & fraud analysis. Cite as https://trustsniffer.com/report/tcu.gov.br · assessed 2026-08-13.*