# PhishDestroy domain threat record: regularizacaoprogramagov.org Content language: English Canonical HTML report: https://phishdestroy.io/domain/regularizacaoprogramagov.org/ Machine-readable companion: https://phishdestroy.io/domain/regularizacaoprogramagov.org/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-21 15:26:26 UTC - Last availability or vendor check: 2026-10-22 10:49:36 UTC - Stored record updated: 2026-10-22 18:38:11 UTC - VirusTotal detections in the stored snapshot: 8/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: flagged ## Stored classification - Targeted brand: govbr ## Stored infrastructure - Observed IP address: 84.247.161.9 - Registrar in stored WHOIS data: TUCOWS.COM, CO. - Registrar country in stored WHOIS data: KN ## Evidence links - URLScan report: https://urlscan.io/result/01a15f14-9f76-76bd-995d-e6c4dcfc7346/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/regularizacaoprogramagov.org - Certificate Transparency search: https://crt.sh/?q=%25.regularizacaoprogramagov.org - Web Archive lookup: https://web.archive.org/web/*/https://regularizacaoprogramagov.org/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored page captures - Primary capture: https://i.ibb.co/B546rjnx/bec3de1936c4.png Captured: 2026-10-21 15:30:32 UTC - URLScan capture 1: https://screenshots.phishdestroy.io/01a15f14-9f76-76bd-995d-e6c4dcfc7346.png Captured: 2026-10-21 15:30:32 UTC Source report: https://urlscan.io/result/01a15f14-9f76-76bd-995d-e6c4dcfc7346/ - URLScan capture 2: https://urlscan.io/screenshots/01a15edf-3ad2-7541-b3e6-c8f877fa8ed6.png Captured: 2026-10-21 15:26:26 UTC Source report: https://urlscan.io/result/01a15f14-9f76-76bd-995d-e6c4dcfc7346/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/9ed1f148-d1c3-4d3f-a7a3-73917eaac608.png Captured: 2026-10-21 15:31:31 UTC Source report: https://radar.cloudflare.com/scan/9ed1f148-d1c3-4d3f-a7a3-73917eaac608 SHA-256: 91a9c65d9b66fe879ab9ca05f11711799088c20cd66e89e1404d6e85457dcc68 - URLQuery: https://screenshots.phishdestroy.io/uq/4153a3e8-3396-49b0-9f5c-0626730ceeab.png Source report: https://urlquery.net/report/4153a3e8-3396-49b0-9f5c-0626730ceeab SHA-256: 8889b1619abd100cdf70e2cd5a8b9df07670b86086c44ed7d69813cb29b28af9 - URLScan · 2026-10-20: https://screenshots.phishdestroy.io/us/01a15973-41f7-7032-9ad2-ef3c1e64f0eb.png Captured: 2026-10-20 13:14:54 UTC Source report: https://urlscan.io/result/01a15973-41f7-7032-9ad2-ef3c1e64f0eb/ SHA-256: 156cdc929d3ff65d465f288eecdd0fad8e0524887884de948165db72b830048e - URLScan · 2026-10-20: https://screenshots.phishdestroy.io/us/01a15a85-f56f-724f-8552-f7e31ced44b6.png Captured: 2026-10-20 18:14:56 UTC Source report: https://urlscan.io/result/01a15a85-f56f-724f-8552-f7e31ced44b6/ SHA-256: 156cdc929d3ff65d465f288eecdd0fad8e0524887884de948165db72b830048e - URLScan · 2026-10-21: https://screenshots.phishdestroy.io/us/01a15e8d-f8dc-70ce-b941-740fa6dc6d34.png Captured: 2026-10-21 13:02:20 UTC Source report: https://urlscan.io/result/01a15e8d-f8dc-70ce-b941-740fa6dc6d34/ SHA-256: 2c942859a3c73d397012465aa30cb9e8a5553d3dc14fcc27e0949673f950638c - URLScan · 2026-10-21: https://screenshots.phishdestroy.io/us/01a15edf-3ad2-7541-b3e6-c8f877fa8ed6.png Captured: 2026-10-21 14:31:00 UTC Source report: https://urlscan.io/result/01a15edf-3ad2-7541-b3e6-c8f877fa8ed6/ SHA-256: 2c942859a3c73d397012465aa30cb9e8a5553d3dc14fcc27e0949673f950638c - URLScan · 2026-10-21: https://screenshots.phishdestroy.io/us/01a15f19-63c6-749b-95ab-ba30af1e059b.png Captured: 2026-10-21 15:34:27 UTC Source report: https://urlscan.io/result/01a15f19-63c6-749b-95ab-ba30af1e059b/ SHA-256: 156cdc929d3ff65d465f288eecdd0fad8e0524887884de948165db72b830048e ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-21T15:38:03Z", "uuid": "01a15f14-9f76-76bd-995d-e6c4dcfc7346", "scanned_at": "2026-10-21T15:29:16Z", "final_url": "https://regularizacaoprogramagov.org/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://regularizacaoprogramagov.org/", "from": "http://regularizacaoprogramagov.org/", "status": 307 } ], "ip": "84.247.161.9", "ptr": "vmi3680163.contaboserver.net", "domains": [ "fonts.cdnfonts.com", "cdn.lineicons.com", "fonts.googleapis.com", "cdn.jsdelivr.net", "www.gstatic.com" ], "ips": [ "172.253.63.95", "172.67.184.158", "172.67.156.225", "104.17.207.5", "142.251.45.163", "84.247.161.9" ], "asns": [ "15169", "13335", "51167" ], "countries": [ "US", "FR" ], "doc_hash": "c9767d60496a18be6a541a158ab2a454535af16ff9402d7bfc469067e6ec5391", "script_hashes": [ "61a4c059a1111a435e8620fd5b9643ca4e4b42e598d145968c82ca680e6711a8", "fe9394baf30fe96efd4ae857da5173cd2afe8f7f0bc9cfdddc2296ba604193cf", "7099159ebcc61b10106b89c4413112d2689c6b211b6d12a235690cd93b24f34e", "8f9c7f36a5be31aa5c377326e1b53f0ccc7d960759f6656272cf03d6a7da27bf", "7868f6857c58953bc7703391edcad35b33bab49cd0316efe2461e894d54b73a4", "3dcbb234e26f71472de3cf55a44a5f5db029b5da9b5707c9cbfd39f3498ba43e", "4f37d8d2a8ca61704306e26362304e09c32c68346357df4e3526aa56459c8d79", "5fff94771cb91c274d323b72e9edc4409d38b0705ff058ccdc90e3f587392c2b" ], "globals": [ "__next_f", "webpackChunk_N_E", "_N_E", "next", "vam", "va", "vaq" ], "storage_keys": [ "funnelSessionId" ], "tls": { "san": [ "regularizacaoprogramagov.org", "www.regularizacaoprogramagov.org" ], "cipher": "AES_128_GCM", "issuer": "YE1", "subject": "regularizacaoprogramagov.org", "protocol": "TLS 1.3", "valid_to": "2027-01-17T20:21:24Z", "valid_from": "2026-10-19T20:21:25Z" }, "domain_age_days": 1, "apex_age_days": 1, "tls_age_days": 1, "tls_valid_days": 89, "requests": 33, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 99, "malicious": true }, "overall": { "tags": [ "phishing" ], "score": 100, "brands": [ "govbr" ], "malicious": true, "categories": [ "phishing" ] }, "urlscan": { "tags": [ "phishing" ], "score": 100, "brands": [ "Government of Brasil" ], "malicious": true, "categories": [ "phishing" ] } }, "headers": { "server": "nginx/1.24.0 (Ubuntu)", "content-type": "text/html; charset=utf-8", "x-powered-by": "Next.js" } }, "cf": { "v": 1, "fetched_at": "2026-10-21T15:38:05Z", "uuid": "9ed1f148-d1c3-4d3f-a7a3-73917eaac608", "scanned_at": "2026-10-21T15:31:31Z", "final_url": "https://regularizacaoprogramagov.org/", "status": 200, "history": [ { "url": "https://regularizacaoprogramagov.org/", "status": 200 } ], "dom_hash": "9e443fea7071f7bd581f49987d0587d8e9f6619877788b15159057a45372651f", "doc_hash": "c9767d60496a18be6a541a158ab2a454535af16ff9402d7bfc469067e6ec5391", "phishing_v2": [ "phishing" ], "url_risks": [ "Phishing" ], "domain_risks": [ "Newly Seen Domains", "Security Risks", "Phishing", "Security threats", "New Domains", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "regularizacaoprogramagov.org", "type": "A", "value": "84.247.161.9" } ], "dnssec_valid": false, "ip": "84.247.161.9", "verdict": { "tags": [ "phishing" ], "malicious": true, "categories": [ "phishing" ] }, "whois": { "registrar": "Tucows Domains Inc.", "created": "2026-10-19T19:05:26Z", "updated": "2026-10-19T19:05:27Z", "expires": "2027-10-19T19:05:26Z", "nameservers": [ "1-you.njalla.no", "2-can.njalla.in", "3-get.njalla.fo" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-22T18:37:29Z", "analysis_at": "2026-10-22T14:05:31Z", "stats": { "timeout": 0, "harmless": 49, "malicious": 6, "suspicious": 2, "undetected": 35 }, "detections": { "CRDF": "malicious", "DNS8": "suspicious", "Fortinet": "spam", "SOCRadar": "phishing", "OpenPhish": "phishing", "Phishtank": "phishing", "Gridinsoft": "phishing", "alphaMountain.ai": "phishing" }, "reputation": 0, "registrar": "TUCOWS.COM, CO.", "created": "2026-10-19T19:05:26Z", "expires": "2027-10-19T19:05:26Z", "updated": "2026-10-19T19:08:05Z", "first_seen": "2026-10-19T22:05:51Z", "dns": [ { "ttl": 21600, "type": "NS", "value": "1-you.njalla.no" }, { "ttl": 21600, "type": "NS", "value": "2-can.njalla.in" }, { "ttl": 21600, "type": "NS", "value": "3-get.njalla.fo" }, { "ttl": 10800, "type": "A", "value": "84.247.161.9" }, { "ttl": 3600, "type": "SOA", "rname": "you.can-get-no.info", "value": "1-you.njalla.no" } ], "dns_at": "2026-10-21T07:09:59Z", "jarm": "27d40d40d00040d00042d43d000000d2e61cae37a985f75ecafb81b33ca523", "cert": { "san": [ "regularizacaoprogramagov.org", "www.regularizacaoprogramagov.org" ], "issuer": "Let's Encrypt / YE1", "serial": "55640daf19b2898040c4bb2f5e1e54ff0d9", "sha256": "6eab9c0ef3320bcf08d287e9094161f2976e8275dd175881788c96387fd9ccd7", "subject": "regularizacaoprogramagov.org", "valid_to": "2027-01-17T20:21:24Z", "valid_from": "2026-10-19T20:21:25Z" }, "whois": { "registrar": "TUCOWS.COM, CO.", "registrar_iana_id": "69", "registrar_url": "http://tucowsdomains.com", "created": "2026-10-19T19:05:26Z", "updated": "2026-10-19T19:05:27Z", "expires": "2027-10-19T19:05:26Z", "status": [ "addPeriod", "clientTransferProhibited", "clientUpdateProhibited" ], "nameservers": [ "1-you.njalla.no", "2-can.njalla.in", "3-get.njalla.fo" ], "dnssec": "unsigned" }, "rdap": { "status": [ "client transfer prohibited", "client update prohibited", "add period" ], "events": { "expiration": "2027-10-19T19:05:26Z", "last changed": "2026-10-19T19:05:27Z", "registration": "2026-10-19T19:05:26Z", "last update of RDAP database": "2026-10-19T22:05:40Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-10-21T15:38:22Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "regularizacaoprogramagov.org" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "archives": { "last": "2026-10-21T15:28:41Z", "first": "2026-10-21T15:28:41Z", "changes": 0, "days_archived": 1, "avg_page_bytes": 4754 }, "robots_txt": { "present": true }, "social_tags": { "title": "Consulta - Situação Fiscal", "robots": "noindex, nofollow, nocache", "description": "Consulta de situação fiscal" }, "trackers": { "requests": 32, "trackers": [ { "name": "Google Fonts", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "Google Static", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "jsDelivr", "company": "jsDelivr", "category": "Hosting", "requests": 1 }, { "name": "Vercel Frontend Observability", "company": "Vercel", "country": "US", "category": "Site Analytics", "requests": 1 }, { "name": "Google Recaptcha", "company": "Google", "country": "US", "category": "Utilities", "requests": 1 } ] }, "mixed_content": { "no_sri": [ "https://cdn.jsdelivr.net/npm/@tailwindcss/browser@4" ], "third_party_scripts": 1 }, "status": { "up": true, "code": 200, "timings": { "dns": 1, "tls": 31, "wait": 47, "connect": 18, "download": 0 }, "response_ms": 97 }, "tls_connection": { "alpn": "http/1.1", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 22, 80, 443 ] }, "carbon": { "bytes": 12611, "co2_grams": 0.0005, "cleaner_than": 67 }, "dns_server": { "ns": [ { "ip": "95.215.19.5", "host": "3-get.njalla.fo" }, { "ip": "185.193.124.34", "host": "2-can.njalla.in" }, { "ip": "185.193.124.2", "host": "1-you.njalla.no" } ], "zone": "regularizacaoprogramagov.org" }, "location": { "ip": "84.247.161.9", "asn": "51167", "org": "Contabo GmbH", "city": "Düsseldorf", "country": "DE" }, "ssl": { "issuer": "Let's Encrypt / YE1", "subject": "regularizacaoprogramagov.org" }, "dns": { "A": [ "84.247.161.9" ], "NS": [ "1-you.njalla.no", "2-can.njalla.in", "3-get.njalla.fo" ], "SOA": "{\"nsname\": \"1-you.njalla.no\", \"hostmaster\": \"you.can-get-no.info\", \"serial\": 2026101920, \"refresh\": 21600, \"retry\": 7200, \"expire\": 1814400, \"minttl\": 3600}" }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "84.247.161.9", "family": 4 }, "redirects": { "chain": [ "https://regularizacaoprogramagov.org" ] }, "tech_stack": { "technologies": [ "Node.js", "Ubuntu", "React", "styled-components", "Nginx", "Next.js", "jsDelivr", "Priority Hints", "Google Font API", "Webpack", "Module Federation" ] }, "linked_pages": { "internal_count": 1 }, "whois": { "registrar": "Tucows Domains Inc.", "created": "2026-10-19T19:05:26Z", "updated": "2026-10-19T19:05:27Z", "expires": "2027-10-19T19:05:26Z", "status": [ "clientTransferProhibited https://icann.org/epp", "clientUpdateProhibited https://icann.org/epp", "addPeriod https://icann.org/epp" ], "nameservers": [ "1-you.njalla.no", "2-can.njalla.in", "3-get.njalla.fo" ] }, "headers": { "headers": { "server": "nginx/1.24.0 (Ubuntu)", "content-type": "text/html; charset=utf-8", "x-powered-by": "Next.js" } } } } ```