Report Overview
Visitedpublic
2026-01-27 12:00:42
Tags
Submit Tags
URL
w1w.portalrenovacao.com
Finishing URL
portal.aplicativogov.com/recuperar/
IP / ASN
172.67.214.151
Title
gov.br - Acesse sua conta
Detections
urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
8
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
w1w.portalrenovacao.com 4 alert(s) on this Host | unknown | 2025-10-07 | 2026-01-27 | 2026-01-27 | 492 B | 6.2 kB | 188.114.97.1 |  |
sso.acesso.gov.br | 2479 | 2018-11-23 | 2019-05-23 | 2025-11-10 | 464 B | 3.2 kB |  161.148.168.40 |   |
portal.aplicativogov.com 68 alert(s) on this Host | unknown | 2025-11-06 | 2025-11-10 | 2025-11-10 | 35 kB | 1.7 MB | 104.21.40.142 |  |
Cloudflare (CDN)
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.Nginx:1.22.1 (Web servers, Reverse proxies)
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.hCaptcha (Security)
hCaptcha is an anti-bot solution that protects user privacy and rewards websites.jQuery:2.2.4 (JavaScript libraries)
jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.Related reports
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Private YARA rules | portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/api.js.download | audit | Hunting_JS_WebAssembly |
| Private YARA rules | portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/hcaptcha.html | audit | Hunting_JS_WebAssembly |
| Private YARA rules | portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/hcaptcha(1).html | audit | Hunting_JS_WebAssembly |
| Cloudflare DNS | portal.aplicativogov.com | malicious | Sinkholed |
| DNS4EU | w1w.portalrenovacao.com | malicious | Sinkholed |
| Quad9 DNS | w1w.portalrenovacao.com | malicious | Sinkholed |
| Cloudflare DNS | w1w.portalrenovacao.com | malicious | Sinkholed |
| OpenDNS | w1w.portalrenovacao.com | phishing | Phishing Block |
JavaScript (37)
No JavaScripts
HTTP Transactions (67)
| URL | IP | Response | Size |
|---|