Aduaneirabrasil.org pretends to be a tracking portal for the Brazilian postal service (Correios), but it's not the real thing. The real Correios website is correios.com.br, and it has been around for decades. This copycat domain was registered just yesterday, and it asks visitors to enter their CPF — a taxpayer ID that scammers love to steal. Legitimate tracking services don't hide behind a brand-new domain, and they certainly provide a privacy policy when collecting personal data. This site has none of that. The absence of any contact information, about page, or company details is a clear warning sign. If you're wondering whether aduaneirabrasil.org is a scam, the evidence points to yes. Nothing about this site inspires confidence. Our advice: stay away and don't enter your CPF or any other information here.
No — aduaneirabrasil.org doesn't look safe
In plain English
This site is dangerous. It was registered just yesterday, hides all information about who runs it, and is impersonating the Brazilian postal service to collect CPF numbers. There is no privacy policy or contact info, and the whole setup screams phishing. Do not enter any personal data here.
What you should do now
Don't panic. These steps limit the damage, and the sooner you take them the better.
Don't enter any details
No passwords, card numbers or personal information — even if the site looks professional.
Close the tab
Especially if you got here from an email, text message or social media ad.
Already paid? Call your bank
Contact your bank or card provider right away. They can often stop or reverse a recent payment.
Warn others
Report the site and share this check with anyone who sent you the link.
Where the score comes from
Solid technical setup: a valid SSL certificate, modern encryption, and a few browser protections are in place. No malware or phishing flags from Google or blacklists. For a site that collects personal data, this is the bare minimum — but it's done right.
This is the biggest red flag. The domain was registered just one day ago, and the registration is in a grace period that allows deletion. There is no information about who runs the site — no about page, no company name, no contact details. This is exactly what a phishing site looks like.
The site has no history at all. No Wayback Machine snapshots, no reviews, no traffic rank. It's too new to have built any reputation. The only positive is that it hasn't been blacklisted yet, but that means little given its age.
There is no transparency whatsoever. No contact page, no about page, no social media presence, and no clear indication of who operates the site. The homepage mimics the Brazilian postal service (Correios) but is a third-party copy. That's a deliberate attempt to look official while hiding the real operator.
The site asks for a CPF (Brazilian taxpayer ID) — a sensitive piece of personal data. Yet there is no privacy policy, no terms of service, and no legal disclosure. Any legitimate service collecting such data would have these pages up. Their absence is a serious compliance failure, especially for a site that appears to be impersonating a government service.
The technical backbone is standard: Cloudflare DNS, OVH hosting, fast page load. No email server is set up, which is unusual for a service that might need to send tracking updates, but not a dealbreaker. DNSSEC is missing, though that's common for small sites.
What we checked
Think this verdict is wrong?
Site owners can request a fresh scan. Scores update automatically as signals change.