Is tvetcdacc.go.ke legit? TrustSniffer's high-trust assessment: 100/100

Overview

The website is the public-information and service portal of Kenya’s TVET Curriculum Development, Assessment and Certification Council, presenting education-sector accreditation, competency-based curriculum development, assessment, certification, institutional notices, and access to related public-service portals.

Scam/Impersonation Risk

No identity contradictions, impersonation indicators, phishing behavior, or deceptive financial mechanics were observed. The institutional presentation is consistent with a Kenyan public-service body, while the long-established domain, sustained historical presence, established traffic footprint, and clean external reputation materially support its legitimacy. The homepage contained no login form, hidden form, sensitive-data capture, wallet interaction, clipboard manipulation, or cloaking behavior.

• The homepage identifies TVET CDACC, provides government-domain contact details, names institutional leadership, and describes a coherent statutory public-service mandate.
• External reputation checks recorded no malicious or suspicious detections, no reported IP abuse, and no signature matches; the domain also has an established top-one-million traffic presence.
• The domain was registered on 22 February 2016 and is approximately 10.45 years old; the registrar is ICT Authority, with registration valid to 22 February 2027.
• The web archive contains 159 snapshots spanning 24 December 2016 to 5 March 2026, covering 11 tracked calendar years, with no established evidence of suspicious repurposing or semantic drift.

Regulatory Verification Notes

The site presents an identifiable statutory council rather than a private investment or financial-services operator. Its restricted Kenyan government-domain context, named governance structure, physical Nairobi presence, and clearly defined public functions provide strong institutional attribution. No commercial financial license is claimed, and none is indicated as necessary for the public-service model shown; the supplied homepage evidence does not, however, reproduce the council’s constituting legislation or another formal legal instrument.

• The homepage’s About Us structure includes background, functions, council members, senior management, directorates, and an organogram.
• The domain uses the restricted `go.ke` government suffix, aligning its namespace with the stated Kenyan public-sector identity.
• Hosting is provided from AS36914 by Kenya Education Network in Kenya.
• The site’s transport encryption uses a YR1-issued domain-validated TLS certificate, valid to 8 October 2026.

What to Verify Next

For formal procurement, accreditation reliance, or institutional onboarding, the council’s mandate and current authorized representatives should be corroborated through an independent Kenyan government directory or the applicable constituting instrument. Official contact channels should be confirmed through an independently sourced government route before sending formal records or acting on payment instructions. Service applications should be entered through portals reached from the main site rather than through unsolicited messages.

• The homepage provides separate navigation for the TVET CDACC Portal, learning-management system, staff services, and assessment-related functions, making correct portal selection operationally relevant.
• The Opportunities and Downloads areas expose vacancies, internships, tenders, circulars, and publications that may support document-level validation before institutional action.

Summary Verdict

The website is a legitimate, established, and trustworthy Kenyan public-service portal. Its identity, provenance, reputation, technical operation, and institutional content converge without contradictory risk signals. Normal interaction, including account login and standard use through its official services, is appropriate.

Infrastructure Integrity

The site resolves directly to a single likely origin address rather than operating behind a detected CDN or WAF, leaving the origin publicly reachable. This is a conventional hosting posture and does not undermine the legitimacy assessment, although it provides less edge-layer shielding than a CDN-protected deployment.

Closing Assessment

Prospective users may engage with the site normally, while organizations undertaking formal or consequential transactions should apply their standard public-sector counterparty and out-of-band authorization controls.