VirusTotal
8 / 92 engine detections
打开报告regularizacaoprogramagov.org:冒充 Govbr,PhishDestroy 于 2026-10-21 检测到。风险:关键(100/100)。注册商:TUCOWS.COM, CO。托管:Contabo GmbH。PhishDestroy 已发送1 份滥用举报。VirusTotal:8/92 个引擎标记。Google 安全浏览将其标记为危险。请勿输入登录凭据,也不要连接钱包。
“Consulta - Situação Fiscal”
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@contabo.de.
The latest stored availability evidence still shows the domain reachable; 27 hours has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
冒充 Govbr: regularizacaoprogramagov.org — 未验证. 证据摘要: VirusTotal 8/92 (alphaMountain.ai, CRDF, DNS8, Fortinet, Gridinsoft); URLScan malicious verdict; Google…
The evidence summary below uses retained observations. Each source keeps its own collection date.
8 / 92 engine detections
打开报告恶意
打开报告Threat flag recorded
打开报告DBL_SPAM
恶意
打开报告扫描报告
打开报告4 community references
打开报告结果反映各来源的采集时间。零检出不代表安全。OTX 引用为社区发布的内容。
已存档的页面、网络和扫描器观测结果,按来源和观测时间分组。
观察到: · Retrieved:
| Uuid | 01a15f14-9f76-76bd-995d-e6c4dcfc7346 |
|---|---|
| Final url | https://regularizacaoprogramagov.org/ |
| 状态 | 200 |
| 已重定向 | https-only |
| Redirects | [
{
"to": "https://regularizacaoprogramagov.org/",
"from": "http://regularizacaoprogramagov.org/",
"status": 307
}
] |
| Ip | 84.247.161.9 |
| Ptr | vmi3680163.contaboserver.net |
| Contacted domains | [
"fonts.cdnfonts.com",
"cdn.lineicons.com",
"fonts.googleapis.com",
"cdn.jsdelivr.net",
"www.gstatic.com"
] |
| Contacted IP addresses | [
"172.253.63.95",
"172.67.184.158",
"172.67.156.225",
"104.17.207.5",
"142.251.45.163",
"84.247.161.9"
] |
| Asns | [
"15169",
"13335",
"51167"
] |
| Countries | [
"US",
"FR"
] |
| Document hash | c9767d60496a18be6a541a158ab2a454535af16ff9402d7bfc469067e6ec5391 |
| Script hashes | [
"61a4c059a1111a435e8620fd5b9643ca4e4b42e598d145968c82ca680e6711a8",
"fe9394baf30fe96efd4ae857da5173cd2afe8f7f0bc9cfdddc2296ba604193cf",
"7099159ebcc61b10106b89c4413112d2689c6b211b6d12a235690cd93b24f34e",
"8f9c7f36a5be31aa5c377326e1b53f0ccc7d960759f6656272cf03d6a7da27bf",
"7868f6857c58953bc7703391edcad35b33bab49cd0316efe2461e894d54b73a4",
"3dcbb234e26f71472de3cf55a44a5f5db029b5da9b5707c9cbfd39f3498ba43e",
"4f37d8d2a8ca61704306e26362304e09c32c68346357df4e3526aa56459c8d79",
"5fff94771cb91c274d323b72e9edc4409d38b0705ff058ccdc90e3f587392c2b"
] |
| Globals | [
"__next_f",
"webpackChunk_N_E",
"_N_E",
"next",
"vam",
"va",
"vaq"
] |
| Storage keys | [
"funnelSessionId"
] |
| Tls | {
"san": [
"regularizacaoprogramagov.org",
"www.regularizacaoprogramagov.org"
],
"cipher": "AES_128_GCM",
"issuer": "YE1",
"subject": "regularizacaoprogramagov.org",
"protocol": "TLS 1.3",
"valid_to": "2027-01-17T20:21:24Z",
"valid_from": "2026-10-19T20:21:25Z"
} |
| 域名年龄(天) | 1 |
| Apex age days | 1 |
| Tls age days | 1 |
| TLS 有效天数 | 89 |
| Requests | 33 |
| Provider verdicts | {
"engines": {
"tags": [
"urlscan-ml",
"urlscan-ml-60c5e22"
],
"score": 99,
"malicious": true
},
"overall": {
"tags": [
"phishing"
],
"score": 100,
"brands": [
"govbr"
],
"malicious": true,
"categories": [
"phishing"
]
},
"urlscan": {
"tags": [
"phishing"
],
"score": 100,
"brands": [
"Government of Brasil"
],
"malicious": true,
"categories": [
"phishing"
]
}
} |
| HTTP headers | {
"server": "nginx/1.24.0 (Ubuntu)",
"content-type": "text/html; charset=utf-8",
"x-powered-by": "Next.js"
} |
观察到: · Retrieved:
| Uuid | 9ed1f148-d1c3-4d3f-a7a3-73917eaac608 |
|---|---|
| Final url | https://regularizacaoprogramagov.org/ |
| 状态 | 200 |
| History | [
{
"url": "https://regularizacaoprogramagov.org/",
"status": 200
}
] |
| DOM structure hash | 9e443fea7071f7bd581f49987d0587d8e9f6619877788b15159057a45372651f |
| Document hash | c9767d60496a18be6a541a158ab2a454535af16ff9402d7bfc469067e6ec5391 |
| Phishing v2 | [
"phishing"
] |
| Url risks | [
"Phishing"
] |
| 域名风险 | [
"Newly Seen Domains",
"Security Risks",
"Phishing",
"Security threats",
"New Domains",
"CIPA Filter",
"CIPA"
] |
| Radar rank | {
"bucket": ">200000"
} |
| DNS 记录 | [
{
"name": "regularizacaoprogramagov.org",
"type": "A",
"value": "84.247.161.9"
}
] |
| DNSSEC 有效 | false |
| Ip | 84.247.161.9 |
| Verdict | {
"tags": [
"phishing"
],
"malicious": true,
"categories": [
"phishing"
]
} |
| 注册记录 | {
"registrar": "Tucows Domains Inc.",
"created": "2026-10-19T19:05:26Z",
"updated": "2026-10-19T19:05:27Z",
"expires": "2027-10-19T19:05:26Z",
"nameservers": [
"1-you.njalla.no",
"2-can.njalla.in",
"3-get.njalla.fo"
]
} |
观察到: · Retrieved:
| Vendor result counts | {
"timeout": 0,
"harmless": 49,
"malicious": 6,
"suspicious": 2,
"undetected": 35
} |
|---|---|
| Vendor labels | {
"CRDF": "malicious",
"DNS8": "suspicious",
"Fortinet": "spam",
"SOCRadar": "phishing",
"OpenPhish": "phishing",
"Phishtank": "phishing",
"Gridinsoft": "phishing",
"alphaMountain.ai": "phishing"
} |
| Reputation | 0 |
| 注册商 | TUCOWS.COM, CO. |
| 创建 | 2026-10-19T19:05:26Z |
| Expires | 2027-10-19T19:05:26Z |
| Updated | 2026-10-19T19:08:05Z |
| 首次发现 | 2026-10-19T22:05:51Z |
| DNS 记录 | [
{
"ttl": 21600,
"type": "NS",
"value": "1-you.njalla.no"
},
{
"ttl": 21600,
"type": "NS",
"value": "2-can.njalla.in"
},
{
"ttl": 21600,
"type": "NS",
"value": "3-get.njalla.fo"
},
{
"ttl": 10800,
"type": "A",
"value": "84.247.161.9"
},
{
"ttl": 3600,
"type": "SOA",
"rname": "you.can-get-no.info",
"value": "1-you.njalla.no"
}
] |
| Dns at | 2026-10-21T07:09:59Z |
| Jarm | 27d40d40d00040d00042d43d000000d2e61cae37a985f75ecafb81b33ca523 |
| Certificate | {
"san": [
"regularizacaoprogramagov.org",
"www.regularizacaoprogramagov.org"
],
"issuer": "Let's Encrypt / YE1",
"serial": "55640daf19b2898040c4bb2f5e1e54ff0d9",
"sha256": "6eab9c0ef3320bcf08d287e9094161f2976e8275dd175881788c96387fd9ccd7",
"subject": "regularizacaoprogramagov.org",
"valid_to": "2027-01-17T20:21:24Z",
"valid_from": "2026-10-19T20:21:25Z"
} |
| 注册记录 | {
"registrar": "TUCOWS.COM, CO.",
"registrar_iana_id": "69",
"registrar_url": "http://tucowsdomains.com",
"created": "2026-10-19T19:05:26Z",
"updated": "2026-10-19T19:05:27Z",
"expires": "2027-10-19T19:05:26Z",
"status": [
"addPeriod",
"clientTransferProhibited",
"clientUpdateProhibited"
],
"nameservers": [
"1-you.njalla.no",
"2-can.njalla.in",
"3-get.njalla.fo"
],
"dnssec": "unsigned"
} |
| Registry data | {
"status": [
"client transfer prohibited",
"client update prohibited",
"add period"
],
"events": {
"expiration": "2027-10-19T19:05:26Z",
"last changed": "2026-10-19T19:05:27Z",
"registration": "2026-10-19T19:05:26Z",
"last update of RDAP database": "2026-10-19T22:05:40Z"
}
} |
| Mail configuration | {
"spf_lookups": 0
} |
|---|---|
| CAA 记录 | {
"domain": "regularizacaoprogramagov.org"
} |
| Protective DNS results | {
"resolvers": 12,
"blocked_by": [
"CloudFlare Family"
],
"blocked_count": 1
} |
| Web archive observations | {
"last": "2026-10-21T15:28:41Z",
"first": "2026-10-21T15:28:41Z",
"changes": 0,
"days_archived": 1,
"avg_page_bytes": 4754
} |
| Crawler rules | {
"present": true
} |
| 页面标题与元数据 | {
"title": "Consulta - Situação Fiscal",
"robots": "noindex, nofollow, nocache",
"description": "Consulta de situação fiscal"
} |
| Trackers | {
"requests": 32,
"trackers": [
{
"name": "Google Fonts",
"company": "Google",
"country": "US",
"category": "Hosting",
"requests": 1
},
{
"name": "Google Static",
"company": "Google",
"country": "US",
"category": "Hosting",
"requests": 1
},
{
"name": "jsDelivr",
"company": "jsDelivr",
"category": "Hosting",
"requests": 1
},
{
"name": "Vercel Frontend Observability",
"company": "Vercel",
"country": "US",
"category": "Site Analytics",
"requests": 1
},
{
"name": "Google Recaptcha",
"company": "Google",
"country": "US",
"category": "Utilities",
"requests": 1
}
]
} |
| 表单与混合内容 | {
"no_sri": [
"https://cdn.jsdelivr.net/npm/@tailwindcss/browser@4"
],
"third_party_scripts": 1
} |
| 状态 | {
"up": true,
"code": 200,
"timings": {
"dns": 1,
"tls": 31,
"wait": 47,
"connect": 18,
"download": 0
},
"response_ms": 97
} |
| TLS connection | {
"alpn": "http/1.1",
"cipher": "TLS_AES_256_GCM_SHA384",
"protocol": "TLSv1.3",
"versions": [
"TLSv1.2",
"TLSv1.3"
],
"authorized": true,
"forward_secrecy": true
} |
| Ports | {
"open": [
22,
80,
443
]
} |
| Carbon | {
"bytes": 12611,
"co2_grams": 0.0005,
"cleaner_than": 67
} |
| Dns server | {
"ns": [
{
"ip": "95.215.19.5",
"host": "3-get.njalla.fo"
},
{
"ip": "185.193.124.34",
"host": "2-can.njalla.in"
},
{
"ip": "185.193.124.2",
"host": "1-you.njalla.no"
}
],
"zone": "regularizacaoprogramagov.org"
} |
| Location | {
"ip": "84.247.161.9",
"asn": "51167",
"org": "Contabo GmbH",
"city": "Düsseldorf",
"country": "DE"
} |
| Ssl | {
"issuer": "Let's Encrypt / YE1",
"subject": "regularizacaoprogramagov.org"
} |
| DNS 记录 | {
"A": [
"84.247.161.9"
],
"NS": [
"1-you.njalla.no",
"2-can.njalla.in",
"3-get.njalla.fo"
],
"SOA": "{\"nsname\": \"1-you.njalla.no\", \"hostmaster\": \"you.can-get-no.info\", \"serial\": 2026101920, \"refresh\": 21600, \"retry\": 7200, \"expire\": 1814400, \"minttl\": 3600}"
} |
| Dnssec | {
"ds": false,
"rrsig": false,
"dnskey": false
} |
| Hsts | {
"message": "Site does not serve any HSTS headers."
} |
| HTTP security policies | {
"xFrameOptions": false,
"referrerPolicy": false,
"xXSSProtection": false,
"permissionsPolicy": false,
"xContentTypeOptions": false,
"contentSecurityPolicy": false,
"strictTransportPolicy": false,
"crossOriginOpenerPolicy": false,
"crossOriginEmbedderPolicy": false,
"crossOriginResourcePolicy": false
} |
| Get ip | {
"ip": "84.247.161.9",
"family": 4
} |
| Redirects | {
"chain": [
"https://regularizacaoprogramagov.org"
]
} |
| Tech stack | {
"technologies": [
"Node.js",
"Ubuntu",
"React",
"styled-components",
"Nginx",
"Next.js",
"jsDelivr",
"Priority Hints",
"Google Font API",
"Webpack",
"Module Federation"
]
} |
| Page links | {
"internal_count": 1
} |
| 注册记录 | {
"registrar": "Tucows Domains Inc.",
"created": "2026-10-19T19:05:26Z",
"updated": "2026-10-19T19:05:27Z",
"expires": "2027-10-19T19:05:26Z",
"status": [
"clientTransferProhibited https://icann.org/epp",
"clientUpdateProhibited https://icann.org/epp",
"addPeriod https://icann.org/epp"
],
"nameservers": [
"1-you.njalla.no",
"2-can.njalla.in",
"3-get.njalla.fo"
]
} |
| HTTP headers | {
"headers": {
"server": "nginx/1.24.0 (Ubuntu)",
"content-type": "text/html; charset=utf-8",
"x-powered-by": "Next.js"
}
} |
不是。PhishDestroy 将 regularizacaoprogramagov.org 归类为“冒充 Govbr”(风险:关键,100/100),首次检测于 2026-10-21。VirusTotal:8/92 个引擎标记。Google 安全浏览将其标记为危险。已列入 Spamhaus DBL。请将该网站视为不安全。
不安全。请勿在 regularizacaoprogramagov.org 连接钱包、签署消息或批准代币。钓鱼网站会请求授权(approve、setApprovalForAll、Permit2),让运营者转走你的资产,而已确认的交易无法撤销。
更改你在该网站输入过的所有密码,并开启双重验证。如果你连接过钱包或签署过任何内容,请撤销授权,并将剩余资金转到新钱包;切勿透露助记词。分步指南:紧急处理指南。
1-you.njalla.no2-can.njalla.in3-get.njalla.fo位置信息描述的是 IP 网络。
6eab9c0ef3320bcf08d287e9094161f2976e8275dd175881788c96387fd9ccd7regularizacaoprogramagov.orgwww.regularizacaoprogramagov.org已保存的证书元数据。未带时区的证书日期按存档原样显示。传输加密并不能证明该网站值得信任。
Hostnames retained in the domain record or Certificate Transparency cache. A hostname alone does not establish current availability or malicious activity.
www.regularizacaoprogramagov.orgDomain recordThe original observation time is not recorded for these hostnames.
Google PageSpeed Insights — 移动端性能审核: regularizacaoprogramagov.org · checked Oct 21, 2026
估算时间描述的是一个观测时间窗口。它并不能证明注册商采取了措施,也不代表网站变为不可访问的确切时刻。
由监测程序和来源采集器保留的带日期变更记录。最新观测排在最前;来源状态并不能证明站点已被下架。
No flag recorded→Flag recorded
7→8
未知→protected
captcha · challenge
6→7
可访问
比较浏览器与爬虫各自收到的内容,并检查是否存在 Keitaro 流量分发。
regularizacaoprogramagov.org
PD-20261021-EF9A12 Recipient: abuse@contabo.de 如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。
选择您所在的国家/地区以获取 官方网络犯罪联系人 或 创建投诉草稿 →。
Template-based draft · optional AI wording assistance requires separate consent
请根据您提供过的信息选择相应的步骤。请将本报告的副本与您自己的记录一并保存。
停止使用可疑网站。请通过官方应用或您已信任的网址访问真正的服务。
请将原始邮件、收据、消息和截图保存在安全的地方。基于事实的时间线有助于受理机构了解事件经过。 IC3 evidence guidance ↗
regularizacaoprogramagov.org)即使你并不了解所有细节—— 不管怎样都要提交报告. 即使信息不完整,对调查仍有帮助。
举报并不能保证追回损失或启动调查,但及时、准确的交易数据可以帮助执法机构和服务提供商追踪事件。
Further guidance: NIST · phishing responseFBI IC3 · reports & evidenceFTC · recovery scams
本报告汇总了已保存的页面快照、注册与网络记录、扫描器结果以及 PhishDestroy 举报历史。每个来源均保留各自的观测日期。打开来源报告即可查看原始结果。
快照记录的是当时显示的内容。扫描器结果记录的是该服务商在检查时的评估。有效证书或零检出结果都不能保证安全。