pesquisabr[.]online
“Consulta Nacional de CPF – Regularização Educativa”
The domain pesquisabr.online is classified as high-risk and represents a generic phishing threat, specifically impersonating a government service related to CPF (Cadastro de Pessoa Física) regularization. The fraudulent nature of this domain necessitates immediate attention to mitigate potential harm to users who may unwittingly engage with the site.
Analysis reveals that VirusTotal flags this domain with a detection rate of 5 out of 95 security vendors, indicating a concerning level of consensus on its malicious intent. The domain resolves to IP address 154.53.35.92, which may be associated with other similar phishing operations. While the SSL certificate is issued by Let's Encrypt, a common feature among phishing sites, this should not be construed as indicative of legitimacy. The registrar information has not been provided, yet knowledge of ownership can further aid in risk assessment. Current intelligence suggests that this domain is actively used for deceptive purposes, raising significant alarm regarding user safety.
To mitigate the risks associated with pesquisabr.online, users should be educated on recognizing phishing attempts, especially those masquerading as government services. Organizations should implement network security measures that include URL filtering and automated threat detection systems that monitor for known bad domains. Additionally, conducting frequent training sessions on cybersecurity awareness can empower users to identify and report potential threats. The use of multi-factor authentication for accessing sensitive services can also add a layer of protection against phishing attempts.
Network Security Intelligence
Threat Response Pipeline
Public Blocklist Status
Stored Capture
Domain Intelligence
Technical detailsDNS, SSL SANs, timestamps
ICANN OVERSIGHT
Accreditation and RAA context
Accreditation and RAA context
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Technologies · 4 identified
Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.
nodejs.org 100% confidenceExpress is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.
expressjs.com 100% confidenceFacebook pixel is an analytics tool that allows you to measure the effectiveness of your advertising.
facebook.com 100% confidenceHTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 100% confidenceVirusTotal Analysis
Site Performance Analysis
Google PageSpeed Insights — mobile performance audit of pesquisabr.online · checked Jun 29, 2026
Evidence & External Reports
PD-20260629-0B640D Recipient: abuse@cogentco.com Were You Affected by This Site?
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive