{"report_id":"a9d1e9d0-8f89-41e7-a715-c21751d12cce","version":6,"status":"done","tags":[],"date":"2026-01-27T12:00:42Z","url":{"schema":"http","addr":"w1w.portalrenovacao.com","fqdn":"w1w.portalrenovacao.com","domain":"portalrenovacao.com","tld":"com"},"ip":{"addr":"172.67.214.151","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"title":"gov.br - Acesse sua conta","dom":{"size":500209,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (39360)","md5":"0310fb73b45f31477350e0205e28047e","sha1":"ec0a647922f6bd524cf010afe4e2698c7c84875a","sha256":"7b3b3a4a00cc6e26e32a5877a692bb8054d1b1063d3c57cd3a3305be8d874e63","sha512":"2005fe94a624fd196e56ccc7e5b39e79f327ddf0c023b5a0c709377c22f14e09a708104286d3eb8189f6d41b688e5c09a80477998de2f102c892eb2928271f9c","ssdeep":"6144:Bwkt/odhMaGVgFACvFSOkZaTiRGnRD1pF:zt/baGEz/j","tlshash":"22b41a667204303a51eb62e114af260f63b6d118a547405cfa75ece6bcbe88d647bf3c","dom_hash":"domhash8bbede5f40b1f6861c538b4d03b9ed35","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"w1w.portalrenovacao.com","fqdn":"w1w.portalrenovacao.com","domain":"portalrenovacao.com","tld":"com"},"ip":{"addr":"172.67.214.151","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-03T12:00:42Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":8}},"detection":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-01-27","alert":"Hunting_JS_WebAssembly","trigger":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/api.js.download","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-01-27","alert":"Hunting_JS_WebAssembly","trigger":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/hcaptcha.html","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-01-27","alert":"Hunting_JS_WebAssembly","trigger":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/hcaptcha(1).html","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"portal.aplicativogov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"w1w.portalrenovacao.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"w1w.portalrenovacao.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"w1w.portalrenovacao.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"w1w.portalrenovacao.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"w1w.portalrenovacao.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-07","domain_rank":0,"first_seen":"2026-01-27T10:54:45.394583Z","last_seen":"2026-01-27T10:54:47.860526Z","alert_count":4,"request_count":1,"received_data":6160,"sent_data":492,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"sso.acesso.gov.br","ip":{"addr":"161.148.168.40","port":443,"asn":10954,"as":"SERVICO FEDERAL DE PROCESSAMENTO DE DADOS - SERPRO","country":"Brazil","country_code":"BR"},"domain_registered":"2018-11-23","domain_rank":2479,"first_seen":"2019-05-23T20:58:40Z","last_seen":"2025-11-10T04:05:37.426448Z","alert_count":0,"request_count":1,"received_data":3188,"sent_data":464,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]}]},{"fqdn":"portal.aplicativogov.com","ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-11-06","domain_rank":0,"first_seen":"2025-11-10T04:05:36.98779Z","last_seen":"2025-11-10T04:05:36.98779Z","alert_count":68,"request_count":65,"received_data":1664311,"sent_data":35048,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:2.2.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1b30a9a08c606738683c100ca5e46941","sha1":"c0d1be1b695ecc0eec961e2579cfd3ee0e90c606","sha256":"ee66eadc7cdc73b6402c2af7ec9182cb2acb5979e4a2705de2fb3cf16f0ee615","sha512":"b49d6c97d20b08fec6f436284db5155929edee5cee822cdbee5ffac545c25283aafab41d544a7222461ab19f962286001cb5d120a360d46cc5a0cfa500081d11","ssdeep":"","tlshash":"42b092731bae0971099e669b23169228baa051f628411508b4594c10441ed8900a1262","size":115,"data":"","first_seen":"2025-03-10T12:11:26.154588Z","last_seen":"2026-03-26T06:42:55.081014Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ed92636c5f8835af2549849f0d67f69b","sha1":"4096efa79c0fb5b0aee9e4956959ee59ad0d9cc5","sha256":"6c3fd2c8df45e3c2cf2c9e943a094ea48df3565647d7c4b2af7d8a3ee49fb77d","sha512":"59f61eb13dcbf87e2798c9b2b05bd34beac55ef6c324c6d1cc65626ffa776462596115202a1c4064235689fca2f46ea33ce57b842d005da4cd070398077c6ad6","ssdeep":"","tlshash":"64d012a757de0c62926e122623080320ba6d76fb6a25da487c466d0818aab4650ad691","size":256,"data":"","first_seen":"2025-09-29T15:42:26.727562Z","last_seen":"2026-05-29T14:27:54.084184Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2558d211aec34ffdca61db92f15cb6e5","sha1":"225548eba9488ef7e1e07ef4474d3969636260af","sha256":"be980baf27338cfa426d3cdef6bde5af6c471affa1a0c9faba0f9191d561342a","sha512":"0e13c47a88cb78cf9dcdd77db9e666eb5ca8db7485e345fad92240e0d87525e92cb1dc49434754719fa88ed0cff01ddcc76dbcb749d04de64bc0b964596fd688","ssdeep":"","tlshash":"7fd080f3575e0cb352752317330d5511b16d50f72454dd447c576c04085ff06407d581","size":234,"data":"","first_seen":"2025-09-29T15:42:26.730154Z","last_seen":"2026-05-29T14:27:54.085115Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e626b910b11708da7f81c42dd062d5ab","sha1":"23651b2099924bb1fc36876fca3c695994176bc5","sha256":"f12f502da1aabb0a2919d734f9306db8f6a1a58be17bc36226bd55bb37d2916e","sha512":"a0ed3343f14143df4d020eff1fc550a2214e9827e42a0113dbcb20564b223949a1ca9fbf60ca4c0f9ef6a3f12d6ade494739c36a26bd6e2d0d55b37169a09a00","ssdeep":"","tlshash":"c8d022bb8b5e4c7222696262234c0140a02d10f75c0089147e402c410cefb0e407d18a","size":256,"data":"","first_seen":"2025-09-29T15:42:26.732716Z","last_seen":"2026-05-29T14:27:54.085966Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/jquery-2.2.4.min.js.download","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"710458dd559c957714ac4a8e95357eb5","sha1":"f694238d616f579a0690001f37984af430c19963","sha256":"b409c14a10b4caad6b54844aa63a5faf748b83eecc2dd0d4fb1d913f8de55365","sha512":"282d65828a43bfe50fe0f9aea8bca3838ac1b5250e7c7c359c066e0428aa723f001d31c2463681b2ad6816a49a8571bf9f3ae29b2dc53adf1bbd7d5c4471322b","ssdeep":"1536:fYE1JVoiB9JqZdXXe2pD3PgoIiulrUn6Z6a4tfOR7WpfWBZPBJda4w9W3qG9a98N:u4J+rlfOhWpgCW6G9a98Hrp","tlshash":"3583c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","size":85582,"data":"","first_seen":"2023-03-07T01:03:07Z","last_seen":"2026-07-24T03:17:58.266101Z","times_seen":12805,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"w1w.portalrenovacao.com/","fqdn":"w1w.portalrenovacao.com","domain":"portalrenovacao.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c85ce04a91d376d703ae3c4a492ef8a6","sha1":"e633027f256e15a4a664f595e819f4616196ff6e","sha256":"47e9cb79bef199afb2cde0ed09ad8fe9c8cda41b4d36293ab2fe81f64c21a035","sha512":"41d876dbd5bcbbe87c829caa907b004adf370fdc951473ad48845a49a104a375d72f63c7bbc1cd42d5c9a1d93e860486c23cbe99c39c9b5f5c4188344fb1d7fd","ssdeep":"","tlshash":"30a022c33e3008882bc28088c88288c88032000e0880e0820000a3b0e83008e0282082","size":66,"data":"","first_seen":"2025-11-10T04:05:47.360343Z","last_seen":"2026-01-27T12:00:44.491869Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cc9b7a80b2d9bb1edabf8a40adbf46a2","sha1":"1d3685b5496596bcf4cde5e4fb3124a9b69c3da8","sha256":"d44e21220e6e22cf3c1f6cb8f2e1c3d39906f2e9509acd13ff5b8f5cd60b61e4","sha512":"1658c8db6621dba3d0ad68fe41439b461868744a556698f12294341f6ef9c831207854642d2bb00aa13221c27471a375ba95c6327f0ea1b43a85b3a0b28e09b6","ssdeep":"","tlshash":"34d012a3975e0ca25265122663481114aa6d55f71911d994bcc56c0409daac741ad591","size":242,"data":"","first_seen":"2025-09-29T15:42:26.743818Z","last_seen":"2026-05-29T14:27:54.086922Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ae837efb5caaeff923c502ce8eb0b626","sha1":"bb98b6cb7590a83c02b7c8e4ba097663b18a02a5","sha256":"d8414b0e7f442b4abcaaf6eff8c619145c53aa95f2dab73c71bfcf4607aa4dfc","sha512":"d59cc5912edffea064196850368b2484f34f19d18e68cace7e38315b7b613e9b248b53c6736b36c5b60ccd46c94a8aee72ae4fa7c50740461ed8d2080d1ca629","ssdeep":"","tlshash":"f5d012a3979e5ca256bd161a230c1554a16d50f7a660d9587c456c00085fb0648ad585","size":244,"data":"","first_seen":"2025-09-29T15:42:26.746952Z","last_seen":"2026-05-29T14:27:54.087755Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b21ec89824d39bb7bfd5b00285db9f19","sha1":"018fae17baab8c9ab694d1aa1dd4ae4a5cfcca49","sha256":"ac69ae08be60b6cde526e8377d6ca41a21ec1e83dfc00c75dc6096c01f9220ef","sha512":"78de3db3f4830288532a5150ae79e4bce65ecb7a91265e0e79877a61123d0084c7e70c068ab50743c7a42d6232da5a260b30bc9269177fca364514c0d256fcae","ssdeep":"","tlshash":"c1d012f3976e0c7292a51316630c0110a16d70f71824d9a5bc45ac04185aa46456d581","size":238,"data":"","first_seen":"2025-09-29T15:42:26.750892Z","last_seen":"2026-05-29T14:27:54.088866Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"48bbfaad543776cf2c1ed5d764916905","sha1":"1caf5acdb4b63c80de0b787acb3dbb91aad1950c","sha256":"7388ecb988d101b727cb0a97f0795b9fd5e841fa3a4dac90b9d8cb253ce8d4e5","sha512":"fe93435e30c134d625dcd32ecf5ee897224a7883f3edd9daa8e5935ffb103f9da8153d64132756f19c4187c86579a0f24f4a8156be97482d2019772e199fe2f9","ssdeep":"","tlshash":"30d012b3575e0c6367a5122623090754a16e5cf71452ae457c956c10085aa16806d4c5","size":238,"data":"","first_seen":"2025-09-29T15:42:26.752901Z","last_seen":"2026-05-29T14:27:54.089787Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d3fc160b64f0c5bfdbd6bee56459aa47","sha1":"5373a90c90491a7ce201143f9996dc342bb7177c","sha256":"36f6f0b878e744cabfccd51dd23b38e696cde1fea4ecc5cbb4b5e2bf0583edc9","sha512":"121f83f1e08acfb7b10673727dc226717bf213bb4ca5be519a179fad2679e97a726f030579c01898cf115448b0143818d6f9b26f5cea6c4aa1aaa613113f5f97","ssdeep":"","tlshash":"dcd012e3576e0cb257aa121a23080911a16d51f75810dd547c956c01089ea06416d582","size":238,"data":"","first_seen":"2025-09-29T15:42:26.754553Z","last_seen":"2026-05-29T14:27:54.090583Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4713ba82736d87776ece07b373f011a9","sha1":"02ccd53508f30e61c1acbb63497094be8ae66681","sha256":"4a9c5ba910efb09fd7a1c51720e028050b6b69fa86ea51f67a6799b8ac3f8662","sha512":"fd9b3200c222b6dce9e850eaca3712686cf63bd09acc4ee2a0c9ee115ebec44255882335f58252d22d8082a8ec2427589caa5c33007bb0de6d9ed215f5fbb117","ssdeep":"","tlshash":"37d012e3677e0cb6a679522733181114a16d50f76c10dd44bc966c00085ea47856d481","size":240,"data":"","first_seen":"2025-09-29T15:42:26.757088Z","last_seen":"2026-05-29T14:27:54.091507Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/contrast.class.js.download","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7035946b60e3e7b494b8e79e0a623893","sha1":"a4f7240525622f8e06a38069d57fc1d63665aae6","sha256":"a6c9b444484a1e7a0ffb5c6eeb8bdd5e003610eaf1c35a6659cc9655f61a7a37","sha512":"5445b5a2cfb0a27cff266806dc53abf61353317db60a8a3032b6f32cfdff848a36fd2b7875d2980fbc155e6a7b42f615ee82318615d70bcde9f560b4890c84bf","ssdeep":"","tlshash":"ab11080465a7239cc8d2546c4c0f18341431760b7545ea3b37acfa467f8832c4efe9ad","size":1097,"data":"","first_seen":"2023-03-10T12:04:25Z","last_seen":"2026-05-29T14:27:54.07932Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a7d157d14215bb2078955bffd63ced28","sha1":"744996a4e6a760435822016b2f218d9bfeff7a47","sha256":"e5e93778b271d2d048cf9778fc23658b11f0bb7391967a067d076259d5c2bf93","sha512":"2547d1d7efa0755f8aff6ec00020e4d85a25a280162f02268b8e62d4fbf30dbaa74f18dd7fb898e9c7e735fbe999e7c9a52a72863c825dc8fb65ce06f126e87f","ssdeep":"","tlshash":"33d080f35b9e0c729369336733484524f16d50fb1510dd447c596c10085ff07507d891","size":242,"data":"","first_seen":"2025-09-29T15:42:26.760048Z","last_seen":"2026-05-29T14:27:54.092338Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"57671aa922b8a3c29d521cc59667d216","sha1":"7a6be6369c2d3b72133a531c8b6cf259509387f2","sha256":"79bc5edd6299c7d1d40db38c6ad09d4503eb584f6dbb54dd027630586e07a6fe","sha512":"ca3ed0e6cb26cba6cae6a63eba8a7bca871d9e7de3164b076b08c680ee7590b42abc5ed6d38deacc6eb67c92986fe8b7c46ad7324eb7ad37aa7e672ce0b5cc70","ssdeep":"","tlshash":"8ed012e3577e0d6353a5161723080314a56d55f71411de657c856c11085aa16847d4c2","size":240,"data":"","first_seen":"2025-09-29T15:42:26.761848Z","last_seen":"2026-05-29T14:27:54.093136Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f4d8c8382c57b7aa107fc2afe44cfc76","sha1":"6071386c3f6a175b95b8cf24404bff2554b6fce5","sha256":"e1ccd1080bec8f564c721e6b60eff70112cf4b673f9efd4759f03418029e2ab9","sha512":"35bb3fb50cc395633f64f68220043689b0eefa6f65c0f678a23c8aa1a6764bf23e8f407cbed6dd45223fd65b858c717655b221dd789f2e7802f92e087654aebb","ssdeep":"","tlshash":"98d022a783de0c62826a526223080300e66ca6f76839ca1cbc422d48586eb4340bd3c4","size":260,"data":"","first_seen":"2025-09-29T15:42:26.76543Z","last_seen":"2026-05-29T14:27:54.094044Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8bf085b1dd09d5d2538705103f11f992","sha1":"5040c7535940d01c961a7c374bf8b902f4e019f5","sha256":"205f7b0ad702f07f4e50ca4c42d5c3f77256447374a66ff57327727254511a36","sha512":"061df92ff2e820ecd7d03eacc8555756b16e4703be0140213905add66388e0102344719e6da57b15470d02bf6f4f94f7febb8d92c95945c80ea5c01c95ab70ae","ssdeep":"","tlshash":"e2d012a7df9e0c7292a62266230801a0a16d90fb24149d447c456d08085ba07407d491","size":244,"data":"","first_seen":"2025-09-29T15:42:26.767401Z","last_seen":"2026-05-29T14:27:54.0949Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e1f0c9c3442cf8f84ecd46a0f157cf82","sha1":"c9d21c31bcfcf802ca5cdb0aa8e72bc0fb7edd70","sha256":"f5b2c91c918e59315377767651577b30ef18b0bd612bd35751e97440ae795fa2","sha512":"15bcb01fbdf12d0828327c15be76bd8ac2b554cabf8876bbeed8f1885ad5f66b92d89794274ebda9048ec4390c85f3273140aa3a98483f56f402b40e152458e9","ssdeep":"","tlshash":"a1d012a3575e4c62667d1736630c0215a16d50fb28149a44bc456c544a6abc6c07d8d1","size":246,"data":"","first_seen":"2025-09-29T15:42:26.771206Z","last_seen":"2026-05-29T14:27:54.095665Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"adb8000d2271c41f99c89e50bfb34ea9","sha1":"c03b30255a3874bcc2dbdda174c9bd7ae997d855","sha256":"2cc64b8ed2f6fcdb4f0f7a8252ab921b8c5ac0b9374d9320ddf8d58c8160ef80","sha512":"3ec103d430e78847d09e69bce5a7165a6e853a92163ad338a2a249583463ff140b473e664a72dc19c216b357d8dc1a664546ce459bf496f1145582aa51b12d71","ssdeep":"","tlshash":"22d012a3575f0c62526d261623184150a16d50f715b0da457c456c10089fa06846d581","size":236,"data":"","first_seen":"2025-09-29T15:42:26.774277Z","last_seen":"2026-03-26T06:42:55.093098Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"09c3b795198498025ee2b0484c5477b0","sha1":"26f41405c0a353903f1e7a54f41c37a7bdb55daf","sha256":"9a618abc694da071d14ef98d2ed2567f04e23dcd1e5cbadb3dd797b58951aa1f","sha512":"43159a0337dc0d60d21d8438580649c3e5c1b44537fdbc65a368df4e080699e903eb717ef7c837bbb7530b49601048b19b55b32772d03f4d8ae8fa0e034b9cfb","ssdeep":"","tlshash":"56d012b397ae8ca353aa1326330c0311a16d68fb6812ae49bc856c10289ea1680ad481","size":238,"data":"","first_seen":"2025-09-29T15:42:26.777419Z","last_seen":"2026-03-26T06:42:55.093868Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/modal.js.download","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9350baa1906e1979585e35a8910d25c3","sha1":"126b7f6bb90891cceceaadd30f1a4cf1e5475540","sha256":"f75a29476ebdcdf3c97670e4c379ed46330b9efcaca46e7aea3ed24d47e8bf38","sha512":"87a8ab2a831c13df4dac3a0720de58d354aab8a8f34fedb71b13d8795c7efe6919c37f35fe6ea515216f613e95fe14bed715e72e9b7bffd1e152f4efbe6e1e71","ssdeep":"","tlshash":"fad0cd485c2c307ca1ef0b73a5dd1d9d789008569d05cb11b0f4e8c20e314501d05cc4","size":286,"data":"","first_seen":"2025-09-29T15:42:26.62468Z","last_seen":"2026-03-26T06:42:55.071978Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6dbaa9a9f9e35b5c9d5737fd585eb661","sha1":"d4a8520e02e2425d7e8f0255cc9bdc283a0709d8","sha256":"ddcdd20aa7ac655e9747817f55c70986939eb178d69e6a2f9cac90651cdff8ed","sha512":"c6206cd6ef21202971b3162a292a36fa86201bd5a66369e47330bc1d0de01b7989f00637031e8edbbdb0e7f8b761a83f6f27542f6e670783aeaf06e3b857c475","ssdeep":"","tlshash":"27b0127317de0d300cde636b332792607f3c51b73d019b0de85a4c00491df4a40b5141","size":112,"data":"","first_seen":"2025-03-10T12:11:26.167767Z","last_seen":"2026-05-29T14:27:54.096516Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"03949c75fd2c363c28fc4cc14f03d417","sha1":"98c81dcf5247b6c1dc7241b1f48f968b538d1173","sha256":"8a9b0ae19fef047c0471ca14d50276313c4834d8595fd96585c07e184cd5119c","sha512":"1026b46bee4f076c6dd10269692bf4d85de425b56ecb116a2869dd5e75dbb78ab67c4318cb32f11368a8b9d66ce4a5ba2eceeae350b081223d444391bca9749d","ssdeep":"","tlshash":"3ed080f3579f0c735265162733080154b16d51f71550dd487c556c010c6ff06417d495","size":229,"data":"","first_seen":"2025-09-29T15:42:26.789714Z","last_seen":"2026-05-29T14:27:54.097391Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a5fb774568501f6d135bf82d0c32188c","sha1":"01595fac7a978870060bb4ab6971cd57f055f5aa","sha256":"2c598624c509311ae68f749a796691453b544b85c86f3a9533bf588af0067f83","sha512":"d1755b2a410925a3bb9033ce56bfeac6b19d6ce264f3f7e1ea554edeec51f84cc0558cdbab27b674773c6ce2e2f126108d42239c9af842b31ebb4d78949bc3f3","ssdeep":"","tlshash":"88d080f3575e0cb35769121773090110b17d51f75451dd887c556c000cdff0a407d4d1","size":231,"data":"","first_seen":"2025-09-29T15:42:26.795377Z","last_seen":"2026-05-29T14:27:54.098248Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a5cdf51e1620a42de1bed7d095206408","sha1":"799b66598cc7b4dc45caa08bb38d98068a6722b5","sha256":"2edae20d4fefdd29318f737048561dbaf31253738c2cba20d9ba4fe56f365945","sha512":"dc9d2668c822d576474b706af0d791bf43dbefd0fb1f556f4e425fa7b0c6ec8a90524200dccf3ceef54e7f98e107d530ae953317acc9af8f9ac463d46c34fd21","ssdeep":"","tlshash":"7dd012e3a75e0c7252ea122723080110a16d56fb1551d95c7c656c00089eb0680ad491","size":231,"data":"","first_seen":"2025-09-29T15:42:26.79732Z","last_seen":"2026-05-29T14:27:54.099085Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"60f1df950a12c64779197f5e4e404c34","sha1":"bf2e0051ed643ed5cc6e7fb7b22b7d9e9c51ba4e","sha256":"2baba3086f8d69909b6d34d91b9032cb528022374700da873fa45951680d165e","sha512":"90c487db476442c3a9fa2020297410ea813dde98306aef2c8da70b010f6ec4c594b5eb07a5129ca3d7d781bc8b491fce9c84e5b72480a2857ec7e2b384938d8e","ssdeep":"","tlshash":"40d012a7576e0c7257651226a3180110a16d52f73451d9487c566c001c9ee46807d495","size":235,"data":"","first_seen":"2025-09-29T15:42:26.799141Z","last_seen":"2026-05-29T14:27:54.099944Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fc0e7fc492a3f502e4842a4d22e4296b","sha1":"d01ae17537e38a9040a3ec95ee167c2eb234d7f4","sha256":"fbf45ba8c8b8f05db9b10342512f0689c5fc59f113a151fd4b1886e955e686a7","sha512":"5aabf53aa3373a20a9d303834aaddaf6b875ee471e8bf998b27ffe8cba2d2b9aa0ca02947460880672e3514cfb5d6058a4a7615c4d18a802fa7d5d6460fd1114","ssdeep":"","tlshash":"97d080f3db5e0c725276179733080110b26d54f77410dd547c456c01095ff06407d4c1","size":231,"data":"","first_seen":"2025-09-29T15:42:26.801019Z","last_seen":"2026-05-29T14:27:54.100716Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/qrcode.min.js.download","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"517b55d3688ce9ef1085a3d9632bcb97","sha1":"2d06c1f823f34c19981c6ae0b0eb0f5861c5e14b","sha256":"c541ef06327885a8415bca8df6071e14189b4855336def4f36db54bde8484f36","sha512":"08d80845e706a3b9e985b799d3849cd7791ad3ba5aa9d793bb4591d4833890d7299810144874905f416c94d8530da74be0ee520066a91ade05a1da8bf0ccb498","ssdeep":"384:WRQ2kvcAAdTRhQLThP2yO9/9G84U5xOiKQYHHHsglDep9m1yfB8dKLMyA+LyUyy9:xThP2V/9N4U/gQYPXa8CAPLyrZ","tlshash":"8c92c7e4f36542f6915e6cd4283f104b64a0a4636c1490acbfb5c1e6a9f8fe0647af74","size":19927,"data":"","first_seen":"2023-03-07T01:14:56Z","last_seen":"2026-07-24T05:49:54.312159Z","times_seen":65604,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cdb7984256d56096d723d4d1acff1f82","sha1":"253ac0f4bafe288b88718c0eb98714151cfe08c8","sha256":"5f1e9af12334fa4f99f7f87c2d2fbca3ee38ea405643f2a7f2a3fd6567bd257c","sha512":"ef8388a3cc5dc1d77a82fb3c6b0e4f42da93f8d421fc7b5e943075f93a7f7e7aa9868ad69856f7b58b50414936f4855d0cdec3f6b427d74a7175c11a016eb52b","ssdeep":"","tlshash":"96d012b3575e4e6262b5161633080614a16d51f71851dd48bd5a6c100c9ae0a41ad6d1","size":233,"data":"","first_seen":"2025-09-29T15:42:26.802827Z","last_seen":"2026-05-29T14:27:54.103041Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/scripts.js.download","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a11858375f79eaf9c6149c9fa7f0b88f","sha1":"60b56e0350cc43271c0f0ca044b3fb819a29f363","sha256":"e4b410190c1aec5ad657cef6d6f2de596d8653fd828c1e6fa96374f109a2478e","sha512":"b0706ab37df57198af5ae1a5cf33c5af69b3ff2301504f36f93af11203f007ebae1faa6d58a0d4359b0f8cd5124c1cca9bc71b55d6381fd66642f5d43330e101","ssdeep":"192:yFXnzC174foSM6w4KlAoyGWTTdJr94rDr9y7r85F:yZzB94rDrxF","tlshash":"1fd10d18bc45169649b733751beb400cffb95a535902c6a8b4acac802f74e6053bfebd","size":6616,"data":"","first_seen":"2024-08-20T05:40:53.210052Z","last_seen":"2026-05-29T14:27:54.041278Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/api.js.download","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"22998a06e0a18b69b240b8a90e781c7f","sha1":"f69353a2ea8431f7e95c2562bff37a960aaf9c33","sha256":"2d70875557ec2cd30d5dd986b695b517b54e0a0e33e42f8a7c7c2cd593e08b40","sha512":"bbdda224f4cfa92914dff05401eec30729b1df505b7365c336797e4e080dfa123eebfe4f04e0281f1f9d1ef395d048802106f666e4b8b2abf076bf1522883f2c","ssdeep":"3072:IwoMM9w2PPDiA2VufqpqRCWtNfN6obZbrxVd54dB2VNyYuiicLvyRUvhZMzkz5re:Iwobw6DiA2VufqpstNF6obZbrxxAtKrq","tlshash":"b924d77b6744613a12f912d000af310fa3f6c9166449546cff26bceebc6e987517ab38","size":219613,"data":"","first_seen":"2025-08-25T20:16:47.693632Z","last_seen":"2026-01-27T12:00:44.488507Z","times_seen":9,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-01-27","alert":"Hunting_JS_WebAssembly","trigger":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/api.js.download","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e4f1ad9020e5f19e9eb9da3d1fb1f9c4","sha1":"0f023ae5a557f622bc6bd026f30df22d77a2ba49","sha256":"26b0068690ab129c811e24d9fcd13e65c5a955d387a2bc239140e9cfdac07693","sha512":"f726a323b7fdde38e76186e7b8e8a3ef3055d4b70f075e1829a6e13267cb0025ed6605f24259129d4f43e3d18c629ee5aace9bd1692d57d14729a3b9288f95ee","ssdeep":"","tlshash":"60d012a357de0ca35779171627080550a26d91fb1450dd44bd556c00085fe0640ad481","size":235,"data":"","first_seen":"2025-09-29T15:42:26.804746Z","last_seen":"2026-05-29T14:27:54.104079Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d1097911686432ee344e9c5497a9d4b6","sha1":"47f1eb40a099e17f9cc825ab0759bd936b5cc4e8","sha256":"59e9405247744bf3657342a00f31b357106ce48a1c44cd9b998155e1b7c685f0","sha512":"0c3c1fa14647b00d031297522efca2b73cd8e4e6a6b27983ecd0219aed979810afec4198101c0f25e3e4791db13e2feb00c6b79cd5bb76ad08667744925e02a6","ssdeep":"","tlshash":"d8c012b5e64a543006853df53df40988845c42251c4099968d0b82f0c4b7d414a7acd4","size":174,"data":"","first_seen":"2025-03-10T12:11:26.17766Z","last_seen":"2026-05-29T14:27:54.104946Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9e333e1b3a98768255d817bebcf426f9","sha1":"7034f51e5f0e7cd5a7ce909d503a49bc7be7ec48","sha256":"a15552378995d45aa228da0249278abc90988b0ff5dec93fcf581d497eca70e5","sha512":"a7a7bf5de1a8006b659c17df043c9681e12ecfabaa1626e4221e9d80c813fc899cd4802f3e199b73b6de5ccbebfa9bfbcacd0df60fa619ac074a78424a7250dc","ssdeep":"","tlshash":"ad314cedb38e15e34f7d23974b2623c9b03d91b1ec4409aa3c04cf99575c89d8665e68","size":1705,"data":"","first_seen":"2025-03-10T12:11:26.178389Z","last_seen":"2026-05-29T14:27:54.105793Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/jquery.maskedinput.js.download","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bf196f5a88226893ea3b4ccc20c8e2c8","sha1":"6e11d2552f042f8046911c67d5aa210c0fc81759","sha256":"08e599ec2c867350e8c19bf77abcfeae04d55a7dea3433708882e9f684f26d64","sha512":"c056533d39c59d4bff67976b3c933b0a09a20df1e89e3c98fc56ae5da7beebe770e603a81d0f1dd2525df86f69270ea2570dc9d3dc8715bf99759f699573c32b","ssdeep":"192:/4yUk20Q6qh6JvXiCcBWi+yi1WGyioW8BQvoQL+ztJcXCy0diFbQC+niyiISOcIN:Q55ZTDdKvorq4Sg","tlshash":"8b722a0e7cf720625663b0be5bdf800962328127148dee047d1c63805fa59b85bfafe9","size":16660,"data":"","first_seen":"2023-03-10T12:04:25Z","last_seen":"2026-05-29T14:27:54.042692Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b51694d824397f01ccb23710b14944bf","sha1":"5e92da2495e77d6f7b7fc758911886601ac9b0d7","sha256":"a7ef4964793d41b6e48508f0e2940c72e359d25e951da081dba670a0f828bb41","sha512":"fcbe90c2829a6df8d40480fca313809b75b671e814752178e9dd9df6d6356d9b8080350a747f73bcc4a5eabf8c3be79f6386aad78da9f3b9d56fd3407f98f0d4","ssdeep":"","tlshash":"41814368b3ac040986a733255b6b03c8583c60b73c4b995a7c1de6705f61d3beb5fca2","size":3992,"data":"","first_seen":"2025-03-10T12:11:26.179166Z","last_seen":"2026-05-29T14:27:54.10663Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dfb0e910f797537cd5869fb1a81262f2","sha1":"0d71a21100f03fb07f057db2055e885cf413dc40","sha256":"d44f6d68f38e68ebc4a1361a579e98c335b268a96535d512acc55a34f74a5261","sha512":"87b3068fdde68466c9a21c0fac98086f998bf081a85c2f4a17741a5aea658bfe9578d4c1610cbecff377b3a80b327cc11401901a9c686324f0da919bd8b6c645","ssdeep":"","tlshash":"6f51cec82dbe1a819527746b628b054d363c6e036889ce15b75c83d4bfc942e82b2b88","size":3007,"data":"","first_seen":"2025-03-10T12:11:26.179946Z","last_seen":"2026-03-26T06:42:55.107823Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/sicredi_logo.png","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portal.aplicativogov.com/recuperar/","date":"2026-01-27T12:00:19.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aplicativogov.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 21:20:02 GMT","end":"Sat, 04 Apr 2026 22:17:44 GMT"},"fingerprint":{"sha1":"B1:28:50:A6:DA:0D:26:35:31:16:3C:BC:2C:4E:8F:1A:FF:C6:6D:DD","sha256":"16:D8:34:40:58:0E:47:F2:04:72:E3:2F:A6:15:92:81:DB:8F:B8:AB:96:24:1F:FF:52:D0:9D:DA:97:2C:CD:D7"}}},"request":{"raw":"GET /recuperar/gov.br%20-%20Acesse%20sua%20conta_files/sicredi_logo.png HTTP/1.1\r\nHost: portal.aplicativogov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal.aplicativogov.com/recuperar/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:00:19 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 02:46:17 GMT\r\netag: \"24fc-63d3bad1d3040\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 9468\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 3956\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UQjdtwNE9dzM9Ca3CKpJtp%2BpFEGcw678iBsi44eThLeHgamLMvB43DGass3%2FJumbZ0s4HoCBO0Rv7tDPfaG7v6zZVtBBDs7SNXZ3EHys5E1VawMQp8niww%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9c4816cbcbeeb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9468,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 22 x 24, 8-bit/color RGBA, non-interlaced","md5":"d81053d842c73157520d7d536989cf64","sha1":"9936363ebd5e6d05e6e179a982de434f8340d714","sha256":"65bd48ac27d3bfab3d135ac6510b206f5b3818cb10f3892f00ba56e3d6159efc","sha512":"f0798d4516cae4acb5c621c126cefebd457195e88c636eaab49c7a8b2682dc246e49a2b4f7f812f8db6479ed0e551d71bfcbd354e277bb1d1e956f51e610113e","ssdeep":"192:vwQrDLPhh+mzkJfZ6MFxJkIkYmPBsezxfMTwfNCexfuaFI+:lpfzkJfRJkIk5PBxpIexfugl","tlshash":"ca12cf42cd6dfc537dbb8042ca7d10b0d96da9042eb89257486d132f3369fa8b8f6702","first_seen":"2025-09-29T15:42:26.525625Z","last_seen":"2026-05-29T14:27:54.048822Z","times_seen":9,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"portal.aplicativogov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/circle-question-solid.svg","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portal.aplicativogov.com/recuperar/","date":"2026-01-27T12:00:19.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aplicativogov.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 21:20:02 GMT","end":"Sat, 04 Apr 2026 22:17:44 GMT"},"fingerprint":{"sha1":"B1:28:50:A6:DA:0D:26:35:31:16:3C:BC:2C:4E:8F:1A:FF:C6:6D:DD","sha256":"16:D8:34:40:58:0E:47:F2:04:72:E3:2F:A6:15:92:81:DB:8F:B8:AB:96:24:1F:FF:52:D0:9D:DA:97:2C:CD:D7"}}},"request":{"raw":"GET /recuperar/gov.br%20-%20Acesse%20sua%20conta_files/circle-question-solid.svg HTTP/1.1\r\nHost: portal.aplicativogov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal.aplicativogov.com/recuperar/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:00:19 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 02:46:19 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2UnrKZ9YcMG7Y%2FaQT6X4HKPqqx7mPgHIAJrnh8AH2296pAb6taV8bqXjYkcRM1hZKq7utBMy2SnrEF1JGdo%2B731k518ffbna%2BU5AlaIr0LmMpgAJHy4QXQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\nage: 3956\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"2b8-63d3bad3bb4c0\"\r\ncf-ray: 9c4816cbec01b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":696,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3ede468e2eadae72938f0dd3938c012f","sha1":"8b72328f0dcc45a9d36a28c17e8de97e28754800","sha256":"324a61acc744a6fb1da221c77029c9b3807bae709d94df2ec15c78133c404c97","sha512":"f533b4d26f663dc48b92e0562c96b4efa6b8635ee1f180b9dde00be41e48d9de9a2d1a3577b7f617058311c7d0fe0e1a04e8d250ef4596b6077656c9547fa6a6","ssdeep":"","tlshash":"b401f4275358017d4f85c3f06c58a53858d671ed3cd486d9e1bc50e161c16dde1698c0","first_seen":"2025-09-29T15:42:26.618054Z","last_seen":"2026-05-29T14:27:54.047017Z","times_seen":9,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"portal.aplicativogov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/govbr-eula.css","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://portal.aplicativogov.com/recuperar/","date":"2026-01-27T12:00:19.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aplicativogov.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 21:20:02 GMT","end":"Sat, 04 Apr 2026 22:17:44 GMT"},"fingerprint":{"sha1":"B1:28:50:A6:DA:0D:26:35:31:16:3C:BC:2C:4E:8F:1A:FF:C6:6D:DD","sha256":"16:D8:34:40:58:0E:47:F2:04:72:E3:2F:A6:15:92:81:DB:8F:B8:AB:96:24:1F:FF:52:D0:9D:DA:97:2C:CD:D7"}}},"request":{"raw":"GET /recuperar/gov.br%20-%20Acesse%20sua%20conta_files/govbr-eula.css HTTP/1.1\r\nHost: portal.aplicativogov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal.aplicativogov.com/recuperar/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:00:19 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 02:46:15 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HVFFFYHJMzsS%2Fopc3wYyqwYN3%2BbUqFZgcNPs%2BUYJiO%2Bmz2lC1aUxzJtUyAPx2WyDkb328GjV4z9852GIIQ4ulyZs0ye%2B2FJS7vZPKauVc540Od1Aa2%2BDfQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/css\r\nage: 3956\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"1d8-63d3bacfeabc0\"\r\ncf-ray: 9c4816cb2bd8b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":472,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"c470c2ef7de38d390a5f461ddaee4120","sha1":"48cd6053d3e1ef6c4d9d2b94aa771f5aca63fbf7","sha256":"fe8da489c6992408563a90a396aca847bbb9a3b94120afdef7466088ea0aa935","sha512":"9b318b98ae9582795ced67a68c239472cf82c691d26481c4a0871af3b84dfec100afe26daee85692e8b853c79e94dcf21ee568d2d02bf760265a2c2fd85a17ce","ssdeep":"","tlshash":"a7f09e7012012e11605d94147f1793e4814bcd72664f7c2669d3a629afca999136029c","first_seen":"2023-04-06T20:52:18Z","last_seen":"2026-05-29T14:27:54.029366Z","times_seen":11,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"portal.aplicativogov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/contrast.class.js.download","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://portal.aplicativogov.com/recuperar/","date":"2026-01-27T12:00:19.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aplicativogov.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 21:20:02 GMT","end":"Sat, 04 Apr 2026 22:17:44 GMT"},"fingerprint":{"sha1":"B1:28:50:A6:DA:0D:26:35:31:16:3C:BC:2C:4E:8F:1A:FF:C6:6D:DD","sha256":"16:D8:34:40:58:0E:47:F2:04:72:E3:2F:A6:15:92:81:DB:8F:B8:AB:96:24:1F:FF:52:D0:9D:DA:97:2C:CD:D7"}}},"request":{"raw":"GET /recuperar/gov.br%20-%20Acesse%20sua%20conta_files/contrast.class.js.download HTTP/1.1\r\nHost: portal.aplicativogov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal.aplicativogov.com/recuperar/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:00:19 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 02:46:15 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KHGHTeYDyxqSp6uIQrMU3wt9lZ%2BK1nP015DdfE2fa05DsLPa6yCrVw7hlIdIT940a0OWtTgiEmGzVDkaTaLCiMUP3wYbxsxHJVtvUtFEFuXljOhIdcz5rg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\netag: W/\"449-63d3bacfeabc0\"\r\ncontent-encoding: br\r\ncontent-type: text/javascript\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9c4816cb2bd9b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1097,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text","md5":"7035946b60e3e7b494b8e79e0a623893","sha1":"a4f7240525622f8e06a38069d57fc1d63665aae6","sha256":"a6c9b444484a1e7a0ffb5c6eeb8bdd5e003610eaf1c35a6659cc9655f61a7a37","sha512":"5445b5a2cfb0a27cff266806dc53abf61353317db60a8a3032b6f32cfdff848a36fd2b7875d2980fbc155e6a7b42f615ee82318615d70bcde9f560b4890c84bf","ssdeep":"","tlshash":"ab11080465a7239cc8d2546c4c0f18341431760b7545ea3b37acfa467f8832c4efe9ad","first_seen":"2023-03-10T12:04:25Z","last_seen":"2026-05-29T14:27:54.07932Z","times_seen":11,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"portal.aplicativogov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/CD-Nuvem.png","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portal.aplicativogov.com/recuperar/","date":"2026-01-27T12:00:19.845Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aplicativogov.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 21:20:02 GMT","end":"Sat, 04 Apr 2026 22:17:44 GMT"},"fingerprint":{"sha1":"B1:28:50:A6:DA:0D:26:35:31:16:3C:BC:2C:4E:8F:1A:FF:C6:6D:DD","sha256":"16:D8:34:40:58:0E:47:F2:04:72:E3:2F:A6:15:92:81:DB:8F:B8:AB:96:24:1F:FF:52:D0:9D:DA:97:2C:CD:D7"}}},"request":{"raw":"GET /recuperar/gov.br%20-%20Acesse%20sua%20conta_files/CD-Nuvem.png HTTP/1.1\r\nHost: portal.aplicativogov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal.aplicativogov.com/recuperar/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:00:19 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 02:46:18 GMT\r\netag: \"1fc-63d3bad2c7280\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 508\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 3956\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hmBx1iyWWd6fI2B%2FgRV8sZi1durD26RfEWc1VTLQk8NBBB9IGSzniUIlQAM0%2FqGIRbqpH9rK8wrXd59AdEAPpXB6KqAQ%2FbVuOHtkjywozsPjdXWFiwKD1w%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9c4816cbdbf9b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":508,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"32e8eba92f2283f348e72eb7514ef0f9","sha1":"ff1aa9f39c56c1b5a850c4f565c6045df4bbc8cc","sha256":"f2b48eec6131cd2fa031fe193abdd80a2da32670b2ab311694122c727dfc432e","sha512":"caaa921d887a6c8c3de79538786e4d1d5d2d41a67ba43baeb84a53f4045c0d8408d0407c9393620687c565951525b9954ea7f3980846c45dc497cc1471813f70","ssdeep":"","tlshash":"e7f005fe5704dd1fc1641dd7c3759833e12169668075dd100410f8468f866214bf1f9a","first_seen":"2025-09-14T23:30:10.617245Z","last_seen":"2026-07-18T11:41:58.840584Z","times_seen":39,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"portal.aplicativogov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/rawline-400.ttf","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://portal.aplicativogov.com/recuperar/","date":"2026-01-27T12:00:21.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aplicativogov.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 21:20:02 GMT","end":"Sat, 04 Apr 2026 22:17:44 GMT"},"fingerprint":{"sha1":"B1:28:50:A6:DA:0D:26:35:31:16:3C:BC:2C:4E:8F:1A:FF:C6:6D:DD","sha256":"16:D8:34:40:58:0E:47:F2:04:72:E3:2F:A6:15:92:81:DB:8F:B8:AB:96:24:1F:FF:52:D0:9D:DA:97:2C:CD:D7"}}},"request":{"raw":"GET /recuperar/gov.br%20-%20Acesse%20sua%20conta_files/rawline-400.ttf HTTP/1.1\r\nHost: portal.aplicativogov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/rawline.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Tue, 27 Jan 2026 12:00:21 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=iso-8859-1\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8n50qEWhzKE8Fk8u7K4z%2FlXnnKsGpJQcKa0l9R%2BGgtaxad06yCkJnI6FbBa4AWo48pdU61vyE2w%2B6gIIL%2FfCB82e3A7%2FNki6nUGxTM6yyoD%2B%2FJIIMNhAZQ%3D%3D\"}]}\r\ncf-ray: 9c4816d43d23b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":311,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"957b6ddace47099197de6f55ca736b12","sha1":"51671f9bd5be9f7215932f63ba6ecca4f44e14c5","sha256":"f0808d12e9ba39d1e316ffa87891468d7691d4740cc6a4137fa8db1bb60cdd3a","sha512":"6e624c670ee09236be5920f2bef3aac70a44122d898af15e4c86da3c37028aaa68211e287695a24ae4dafa052d979688ad3ff6cdc0696639a5a486f1ff5059e0","ssdeep":"","tlshash":"9fe0e75d484333cf5811129039c251d1234813fe747dc7ec2cc6d087526853ecdc618c","first_seen":"2025-11-10T04:05:47.292071Z","last_seen":"2026-01-27T12:00:44.461459Z","times_seen":3,"resource_available":false,"data":null}},"time_used":350,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":350,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"portal.aplicativogov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"w1w.portalrenovacao.com/","fqdn":"w1w.portalrenovacao.com","domain":"portalrenovacao.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-27T12:00:18.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portalrenovacao.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Dec 2025 20:23:44 GMT","end":"Thu, 05 Mar 2026 21:21:33 GMT"},"fingerprint":{"sha1":"5F:A0:42:3E:FC:66:DE:C5:D0:AE:2B:AA:FF:AB:0D:44:44:01:AB:6C","sha256":"BC:C7:57:D0:57:2F:24:C8:6C:9D:24:C5:7A:A7:47:D7:10:9C:7E:52:96:7D:53:14:5F:D4:B3:7F:21:02:98:A7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: w1w.portalrenovacao.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 12:00:18 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Thu, 06 Nov 2025 19:27:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6PCSF%2BGsfQEnO1W3Zq8q1Fx9hAJSzO%2BG21ZF1avnuLoq57jPBZEbWSKhtNlcVBQEC2afP5%2Fj6F%2FeEbO1QfY%2BYTs85AClh2UZCdfLIWfrKgV1eCBR32NI\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9c4816c37f88c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5578,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"527c48ed002e8f461d6a6096d7193242","sha1":"5abaab03e4570cff42fbedf781561b4f813def3c","sha256":"d675641f663cdf345a2f2f163dbe76f1c94406a9241224a37344e86203f4e393","sha512":"6d586f09725f362172cada2353cff45a0635da63edf021fc2073df4e208d90d61c3e68a66a153085423dcf6f24ce876b218e6baa693ed40b49be61f80099ec1a","ssdeep":"96:REG2G4p3TFc+djidWOKFGrXiLdYfLr1mFS9FaW1q1xU1vo1fc+Fl1JFS9F1r9TkV:RN2G4p3TFc+dGkOKFWXiLdYfLr1mFS9w","tlshash":"12b11069aaa704466a43e0647bf6468433a5c007c94ecd697fdd62b4cfc8298ece734c","first_seen":"2025-11-10T04:05:47.31037Z","last_seen":"2026-01-27T12:00:44.462124Z","times_seen":3,"resource_available":false,"data":null}},"time_used":477,"timings":{"blocked":27,"dns":9,"connect":1,"send":0,"wait":423,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"w1w.portalrenovacao.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"w1w.portalrenovacao.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"w1w.portalrenovacao.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"w1w.portalrenovacao.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/id-card-solid.png","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portal.aplicativogov.com/recuperar/","date":"2026-01-27T12:00:19.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aplicativogov.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 21:20:02 GMT","end":"Sat, 04 Apr 2026 22:17:44 GMT"},"fingerprint":{"sha1":"B1:28:50:A6:DA:0D:26:35:31:16:3C:BC:2C:4E:8F:1A:FF:C6:6D:DD","sha256":"16:D8:34:40:58:0E:47:F2:04:72:E3:2F:A6:15:92:81:DB:8F:B8:AB:96:24:1F:FF:52:D0:9D:DA:97:2C:CD:D7"}}},"request":{"raw":"GET /recuperar/gov.br%20-%20Acesse%20sua%20conta_files/id-card-solid.png HTTP/1.1\r\nHost: portal.aplicativogov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal.aplicativogov.com/recuperar/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:00:19 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 02:46:15 GMT\r\netag: \"21c-63d3bacfeabc0\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 540\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 3957\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4CbzeFQkduNTRfPOk8y8ASiyX9xbMGuwjmf%2BFKlpGRLDSm3vk2TOXhQZcCm2L7FyiSHBpmj%2Frw8zVbdl7pDc5Fr6aqbsXP6Ir5S0%2Fi%2FmIxUJMRpvrFO%2BdQ%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9c4816cb3bdeb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":540,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 21, 8-bit/color RGBA, non-interlaced","md5":"7d6c07cf117f300a5f097d5733d1a204","sha1":"48967a1e1d961042852815da4d7b24ec59acfb3f","sha256":"79593a5d12509bce00fbb16f58346b161350e966fc57a471060e9f8acdb3b4dc","sha512":"64c23f1360b66b3514ec898b4e7e4fa5cc891d54fd6b636b6c1ecd112653b484e32b2d1e1ce924dcae0372a051be5e1afb137fb1ef02532bb185f7b8ed4e43a9","ssdeep":"","tlshash":"59f020a2f460ab899f0da2a50bba0324f8932b8f282066c47104c436305606c415e495","first_seen":"2024-12-26T11:41:05.738894Z","last_seen":"2026-07-18T11:41:58.831584Z","times_seen":46,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"portal.aplicativogov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/bradesco_logo.png","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portal.aplicativogov.com/recuperar/","date":"2026-01-27T12:00:19.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aplicativogov.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 21:20:02 GMT","end":"Sat, 04 Apr 2026 22:17:44 GMT"},"fingerprint":{"sha1":"B1:28:50:A6:DA:0D:26:35:31:16:3C:BC:2C:4E:8F:1A:FF:C6:6D:DD","sha256":"16:D8:34:40:58:0E:47:F2:04:72:E3:2F:A6:15:92:81:DB:8F:B8:AB:96:24:1F:FF:52:D0:9D:DA:97:2C:CD:D7"}}},"request":{"raw":"GET /recuperar/gov.br%20-%20Acesse%20sua%20conta_files/bradesco_logo.png HTTP/1.1\r\nHost: portal.aplicativogov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal.aplicativogov.com/recuperar/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:00:19 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 02:46:16 GMT\r\netag: \"1ac7-63d3bad0dee00\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 6855\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 3957\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mGsbAdK8eoW1wYgIZ8geTf%2BUBni%2BQOc3nS4EDWmGawhuFiwl63Lgalcrlnwk8GF5%2FBrBN9xL%2FAyCMATpNnm%2Bt7STSgR9c7n19CylimJsA%2B2MHsG7QSiCmw%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9c4816cb4be3b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6855,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"354efd8e4a76177bcc1f4eb1832b60c3","sha1":"ef4d6d582098b07f8cf8d90643fadfbc30277968","sha256":"279e9c3f5e0e60279f9108faa7c030891605f0caffc7872b3b5a694f7fa3aebd","sha512":"04f9ac9282bacc8bb80442181716c585d59cfd4100a402bd23370ec366b4378f39f9117d13f3a9eaecae2d000ffb92085c44e8b5eeaef9138ad71a2d9c0be9a4","ssdeep":"192:ENe/KySG6jIrB4cEzOVdxfOluykaw370q:ENe/KBG6jgu5zOVdxX3n","tlshash":"91e18e87840d04f1fee882a596518949daf97fb65f5f4287721104807c835b5cfc5eeb","first_seen":"2025-09-29T15:42:26.613857Z","last_seen":"2026-05-29T14:27:54.03075Z","times_seen":9,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"portal.aplicativogov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/brb_logo.png","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portal.aplicativogov.com/recuperar/","date":"2026-01-27T12:00:19.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aplicativogov.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 21:20:02 GMT","end":"Sat, 04 Apr 2026 22:17:44 GMT"},"fingerprint":{"sha1":"B1:28:50:A6:DA:0D:26:35:31:16:3C:BC:2C:4E:8F:1A:FF:C6:6D:DD","sha256":"16:D8:34:40:58:0E:47:F2:04:72:E3:2F:A6:15:92:81:DB:8F:B8:AB:96:24:1F:FF:52:D0:9D:DA:97:2C:CD:D7"}}},"request":{"raw":"GET /recuperar/gov.br%20-%20Acesse%20sua%20conta_files/brb_logo.png HTTP/1.1\r\nHost: portal.aplicativogov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal.aplicativogov.com/recuperar/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:00:19 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 02:46:17 GMT\r\netag: \"115f-63d3bad1d3040\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 4447\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 3956\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fttp9gCusuxFtyyGOEy6lzNNeN6lktH3rNgYoCw%2F9lNmwSm78cwF3xK7YmFlqmBjCvLn49NXaO%2FnmpBr0IavsagfI9V57sB6DOZaHs33qFq0LO9UdD1kNA%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9c4816cbdbf2b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4447,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"6d864dc1f9d92a5e77f716b38c09c0d9","sha1":"71199abf5e93f8f4d8d590b5c0004b8478878de4","sha256":"a1cebfac7bc9694fae24657151c6ae371ce3ff119e611d68c66415c0c52a66c0","sha512":"6121f4d73fe56b9c78d28130223937b2b5e6f42f28f00f61262714b2e7be0d14b01ee1f4fd5af5ec199b77a67b08919d4a2c4cc3db1fc3c6323f2f8c1b2c35cc","ssdeep":"96:41yAV1X8zhmREOhELgOiSmcxSzO5x3F07hDd7bSGMqHM4J:SyAVckEOG3G7hDd7bSGDP","tlshash":"8c919fb7dcf9269902af4e5d03c50725e4e294b9450165b28e60dcbe7d3c1b933c991d","first_seen":"2025-09-29T15:42:26.537719Z","last_seen":"2026-05-29T14:27:54.064523Z","times_seen":9,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"portal.aplicativogov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/itau_logo.png","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portal.aplicativogov.com/recuperar/","date":"2026-01-27T12:00:19.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aplicativogov.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 21:20:02 GMT","end":"Sat, 04 Apr 2026 22:17:44 GMT"},"fingerprint":{"sha1":"B1:28:50:A6:DA:0D:26:35:31:16:3C:BC:2C:4E:8F:1A:FF:C6:6D:DD","sha256":"16:D8:34:40:58:0E:47:F2:04:72:E3:2F:A6:15:92:81:DB:8F:B8:AB:96:24:1F:FF:52:D0:9D:DA:97:2C:CD:D7"}}},"request":{"raw":"GET /recuperar/gov.br%20-%20Acesse%20sua%20conta_files/itau_logo.png HTTP/1.1\r\nHost: portal.aplicativogov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal.aplicativogov.com/recuperar/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:00:19 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 02:46:16 GMT\r\netag: \"49d-63d3bad0dee00\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 1181\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 3957\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OoJosKvew2CwSvbLComZR9eng1PIJoJkKgmIrnQxtP593MSGp3ssvfeccDBhSudQZTqYYq0ScK83dIU2r3Ypb1O6Nx0mVtf9Sch71EQOJ%2Fb7zylyXfD3Ag%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9c4816cb3be1b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1181,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"02beff997dd9b2a1778aa7a8b72fd9e2","sha1":"d567281ba77f8e8c9cfd399cb09d9c1a7cd60ddd","sha256":"637db0dc6114043edbfff5ab07901a74c2b166d9eb4329eac0ace9b19811adce","sha512":"202e9a9361c4848647ff76554e885ae84d7e9f39b11c6b296de611951e77d368eb3ca03bde9a700356fcd764b9fb4acd0f01b5dd1a889ab397d5006dbcd522e1","ssdeep":"","tlshash":"6721a7e4eb0c2b4454759baa4a57d6a0dc0765123a859d4e3c7ac964e23d48829b1ce1","first_seen":"2025-09-29T15:42:26.556515Z","last_seen":"2026-05-29T14:27:54.080365Z","times_seen":9,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"portal.aplicativogov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/safeid_logo.png","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portal.aplicativogov.com/recuperar/","date":"2026-01-27T12:00:19.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aplicativogov.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 21:20:02 GMT","end":"Sat, 04 Apr 2026 22:17:44 GMT"},"fingerprint":{"sha1":"B1:28:50:A6:DA:0D:26:35:31:16:3C:BC:2C:4E:8F:1A:FF:C6:6D:DD","sha256":"16:D8:34:40:58:0E:47:F2:04:72:E3:2F:A6:15:92:81:DB:8F:B8:AB:96:24:1F:FF:52:D0:9D:DA:97:2C:CD:D7"}}},"request":{"raw":"GET /recuperar/gov.br%20-%20Acesse%20sua%20conta_files/safeid_logo.png HTTP/1.1\r\nHost: portal.aplicativogov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal.aplicativogov.com/recuperar/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:00:19 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 02:46:18 GMT\r\netag: \"1cbf-63d3bad2c7280\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 7359\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 3956\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pzQfVtRXm%2B%2B4rrXMuBtViYX11KvmmHIzdOFD48dJT45Ir94T6EvSJSIu8DkYyk8060DjSZS34O5ztCCywEjXWqhS%2Bs4bfE2HkUFvEy3zp9ytAKe3TJhU7w%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9c4816cbebfbb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7359,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"584c1bf21d2648172064a8f0531d4767","sha1":"8fb042dbf7e0fc75594c659642b5a3628f079c44","sha256":"658d3afb8c7c387f59f18e5219aa80d123a4f982eb73bd505deaade9f44ea8a9","sha512":"7513785624df0b51bfcd3f57c767bb28b8105417b897d8712a3c7fd883c0ac1679c7123bd510f01400cb38599c588a1071f5ba41d4ca51d50cfd72b47be3d553","ssdeep":"192:oYl1CCqbPulvEiU85LOA45B3YP0cAb9aieSvZA7r:bYsMKD4HIPsbbeO6/","tlshash":"d3e19d7b9f079038d0eab724b64448498279c72c9e4748ef4b22efb42f1f675695b130","first_seen":"2025-09-29T15:42:26.696621Z","last_seen":"2026-05-29T14:27:54.069682Z","times_seen":10,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"portal.aplicativogov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/govbr-colors.css","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://portal.aplicativogov.com/recuperar/","date":"2026-01-27T12:00:19.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aplicativogov.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 21:20:02 GMT","end":"Sat, 04 Apr 2026 22:17:44 GMT"},"fingerprint":{"sha1":"B1:28:50:A6:DA:0D:26:35:31:16:3C:BC:2C:4E:8F:1A:FF:C6:6D:DD","sha256":"16:D8:34:40:58:0E:47:F2:04:72:E3:2F:A6:15:92:81:DB:8F:B8:AB:96:24:1F:FF:52:D0:9D:DA:97:2C:CD:D7"}}},"request":{"raw":"GET /recuperar/gov.br%20-%20Acesse%20sua%20conta_files/govbr-colors.css HTTP/1.1\r\nHost: portal.aplicativogov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/govbr-templates.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Tue, 27 Jan 2026 12:00:20 GMT\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=iso-8859-1\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2kpF4GwWR%2BLPhKC1eOmHGce5rVTQM5WkghcC7G5qILr%2BvXjSafyIFAiq2DKINL3C%2BZSRB%2BgYwzZ216520ABRxa2cvqSA%2BqR4wSHx0TpBiGP03UBzBNrd9w%3D%3D\"}]}\r\ncf-ray: 9c4816cbfc0cb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":311,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"957b6ddace47099197de6f55ca736b12","sha1":"51671f9bd5be9f7215932f63ba6ecca4f44e14c5","sha256":"f0808d12e9ba39d1e316ffa87891468d7691d4740cc6a4137fa8db1bb60cdd3a","sha512":"6e624c670ee09236be5920f2bef3aac70a44122d898af15e4c86da3c37028aaa68211e287695a24ae4dafa052d979688ad3ff6cdc0696639a5a486f1ff5059e0","ssdeep":"","tlshash":"9fe0e75d484333cf5811129039c251d1234813fe747dc7ec2cc6d087526853ecdc618c","first_seen":"2025-11-10T04:05:47.292071Z","last_seen":"2026-01-27T12:00:44.461459Z","times_seen":3,"resource_available":false,"data":null}},"time_used":388,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":388,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"portal.aplicativogov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/rawline-400.woff2","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://portal.aplicativogov.com/recuperar/","date":"2026-01-27T12:00:20.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aplicativogov.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 21:20:02 GMT","end":"Sat, 04 Apr 2026 22:17:44 GMT"},"fingerprint":{"sha1":"B1:28:50:A6:DA:0D:26:35:31:16:3C:BC:2C:4E:8F:1A:FF:C6:6D:DD","sha256":"16:D8:34:40:58:0E:47:F2:04:72:E3:2F:A6:15:92:81:DB:8F:B8:AB:96:24:1F:FF:52:D0:9D:DA:97:2C:CD:D7"}}},"request":{"raw":"GET /recuperar/gov.br%20-%20Acesse%20sua%20conta_files/rawline-400.woff2 HTTP/1.1\r\nHost: portal.aplicativogov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/rawline.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Tue, 27 Jan 2026 12:00:20 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=iso-8859-1\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bKJ14wctgvWEC2DFr1VpW6FjHGik3FNMx9u8uYSzq5lUG9mkoJ55s8lPwvL4QQrVgCcNtTUmMNUjbSYG%2B%2FEmT2I%2FR8UpFQrpH8ODA3KYdm4cE5MCYdPfsw%3D%3D\"}]}\r\ncf-ray: 9c4816cebc7ab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":311,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"957b6ddace47099197de6f55ca736b12","sha1":"51671f9bd5be9f7215932f63ba6ecca4f44e14c5","sha256":"f0808d12e9ba39d1e316ffa87891468d7691d4740cc6a4137fa8db1bb60cdd3a","sha512":"6e624c670ee09236be5920f2bef3aac70a44122d898af15e4c86da3c37028aaa68211e287695a24ae4dafa052d979688ad3ff6cdc0696639a5a486f1ff5059e0","ssdeep":"","tlshash":"9fe0e75d484333cf5811129039c251d1234813fe747dc7ec2cc6d087526853ecdc618c","first_seen":"2025-11-10T04:05:47.292071Z","last_seen":"2026-01-27T12:00:44.461459Z","times_seen":3,"resource_available":false,"data":null}},"time_used":355,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":355,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"portal.aplicativogov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/webfonts/fa-solid-900.woff2","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://portal.aplicativogov.com/recuperar/","date":"2026-01-27T12:00:20.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aplicativogov.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 21:20:02 GMT","end":"Sat, 04 Apr 2026 22:17:44 GMT"},"fingerprint":{"sha1":"B1:28:50:A6:DA:0D:26:35:31:16:3C:BC:2C:4E:8F:1A:FF:C6:6D:DD","sha256":"16:D8:34:40:58:0E:47:F2:04:72:E3:2F:A6:15:92:81:DB:8F:B8:AB:96:24:1F:FF:52:D0:9D:DA:97:2C:CD:D7"}}},"request":{"raw":"GET /recuperar/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: portal.aplicativogov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Tue, 27 Jan 2026 12:00:20 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=iso-8859-1\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5k1utp71KVvqPURcxImcFXIMDAttfznUgaK5jOCaDIuylM0gBI0PB4E%2F2vl4gCKYUX40kvJK8L6R3qQvMgOkM5605i%2BNlpcVfQARnNleHMrsV4W7%2FaCKJg%3D%3D\"}]}\r\ncf-ray: 9c4816cebc7eb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":311,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"957b6ddace47099197de6f55ca736b12","sha1":"51671f9bd5be9f7215932f63ba6ecca4f44e14c5","sha256":"f0808d12e9ba39d1e316ffa87891468d7691d4740cc6a4137fa8db1bb60cdd3a","sha512":"6e624c670ee09236be5920f2bef3aac70a44122d898af15e4c86da3c37028aaa68211e287695a24ae4dafa052d979688ad3ff6cdc0696639a5a486f1ff5059e0","ssdeep":"","tlshash":"9fe0e75d484333cf5811129039c251d1234813fe747dc7ec2cc6d087526853ecdc618c","first_seen":"2025-11-10T04:05:47.292071Z","last_seen":"2026-01-27T12:00:44.461459Z","times_seen":3,"resource_available":false,"data":null}},"time_used":417,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":417,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"portal.aplicativogov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/rawline-500.woff2","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://portal.aplicativogov.com/recuperar/","date":"2026-01-27T12:00:20.270Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aplicativogov.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 21:20:02 GMT","end":"Sat, 04 Apr 2026 22:17:44 GMT"},"fingerprint":{"sha1":"B1:28:50:A6:DA:0D:26:35:31:16:3C:BC:2C:4E:8F:1A:FF:C6:6D:DD","sha256":"16:D8:34:40:58:0E:47:F2:04:72:E3:2F:A6:15:92:81:DB:8F:B8:AB:96:24:1F:FF:52:D0:9D:DA:97:2C:CD:D7"}}},"request":{"raw":"GET /recuperar/gov.br%20-%20Acesse%20sua%20conta_files/rawline-500.woff2 HTTP/1.1\r\nHost: portal.aplicativogov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/rawline.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Tue, 27 Jan 2026 12:00:20 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=iso-8859-1\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LsRyy4kCq%2FZLAKy%2FkVxnlobGjUORhrLVZ4IDzzBmGXQf%2BqgjFCKdgOV4MljoJfVdXmq%2Bxt8Rg0iX2teI6JcB%2FFcRqa1ZPhU8L4%2F2Y%2F3DAjsmsw1muuMrNw%3D%3D\"}]}\r\ncf-ray: 9c4816cebc7bb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":311,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"957b6ddace47099197de6f55ca736b12","sha1":"51671f9bd5be9f7215932f63ba6ecca4f44e14c5","sha256":"f0808d12e9ba39d1e316ffa87891468d7691d4740cc6a4137fa8db1bb60cdd3a","sha512":"6e624c670ee09236be5920f2bef3aac70a44122d898af15e4c86da3c37028aaa68211e287695a24ae4dafa052d979688ad3ff6cdc0696639a5a486f1ff5059e0","ssdeep":"","tlshash":"9fe0e75d484333cf5811129039c251d1234813fe747dc7ec2cc6d087526853ecdc618c","first_seen":"2025-11-10T04:05:47.292071Z","last_seen":"2026-01-27T12:00:44.461459Z","times_seen":3,"resource_available":false,"data":null}},"time_used":422,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":422,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"portal.aplicativogov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/qrcode.png","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portal.aplicativogov.com/recuperar/","date":"2026-01-27T12:00:19.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aplicativogov.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 21:20:02 GMT","end":"Sat, 04 Apr 2026 22:17:44 GMT"},"fingerprint":{"sha1":"B1:28:50:A6:DA:0D:26:35:31:16:3C:BC:2C:4E:8F:1A:FF:C6:6D:DD","sha256":"16:D8:34:40:58:0E:47:F2:04:72:E3:2F:A6:15:92:81:DB:8F:B8:AB:96:24:1F:FF:52:D0:9D:DA:97:2C:CD:D7"}}},"request":{"raw":"GET /recuperar/gov.br%20-%20Acesse%20sua%20conta_files/qrcode.png HTTP/1.1\r\nHost: portal.aplicativogov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal.aplicativogov.com/recuperar/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:00:19 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 02:46:18 GMT\r\netag: \"1d6-63d3bad2c7280\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 470\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 3957\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z6BRDl5gLU5RTl2M%2F6VJSmHdHzJ8MZxuhlxII8qlzIQ3Fe0eLnBkTMu1zIEl72dDZotbHrM05YGykqVbMQA0u%2Bf4GROD9nBELfS8Dp2385bIVISpNpimgg%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9c4816cbdbf7b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":470,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"5b4127b66b4354222ab365fc6168d3c7","sha1":"4dcf9fbed17708b4631580b931a36b2ebfc6b9fd","sha256":"8f2d03df0a04f8b41c6bc0e48609bf373cab7456774effd45119bf582d48d472","sha512":"6d63fae319621fc23879c883abe4b9381bfe15283498e393cd919e06769018f621976eb729b3045ab22aca670e78adf641087258d9f0a814afdee5b47f14f13d","ssdeep":"","tlshash":"b1f0d456d5795924b506715037a22058ce7353f93f1254197cdecc2c8ea8b6eb8c7092","first_seen":"2025-09-29T15:42:26.514955Z","last_seen":"2026-07-18T11:41:58.832511Z","times_seen":38,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"portal.aplicativogov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/birdid_logo.png","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portal.aplicativogov.com/recuperar/","date":"2026-01-27T12:00:19.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aplicativogov.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 21:20:02 GMT","end":"Sat, 04 Apr 2026 22:17:44 GMT"},"fingerprint":{"sha1":"B1:28:50:A6:DA:0D:26:35:31:16:3C:BC:2C:4E:8F:1A:FF:C6:6D:DD","sha256":"16:D8:34:40:58:0E:47:F2:04:72:E3:2F:A6:15:92:81:DB:8F:B8:AB:96:24:1F:FF:52:D0:9D:DA:97:2C:CD:D7"}}},"request":{"raw":"GET /recuperar/gov.br%20-%20Acesse%20sua%20conta_files/birdid_logo.png HTTP/1.1\r\nHost: portal.aplicativogov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal.aplicativogov.com/recuperar/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:00:19 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 02:46:18 GMT\r\netag: \"4b7-63d3bad2c7280\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 1207\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 3956\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vTaZ7kXLjQwJHFjM%2FSsjihIev0YgJhq1Hahzm3lq3hRHjue2HH1RdQnYAfwQAd9egrw4cSlJJFRJD7SG21kogRRZ3mRqElf3XOcJtyxgMajALNFil3CkCA%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9c4816cbebfcb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1207,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"09456b2f0653f29dd9b7a821f61dcb13","sha1":"20a220c548fc6e8eacdf688b0be409cb04e7f121","sha256":"059cd22cee371b84117a48981ac8c01e0f9450cf403b9afdebdb3f7541369b45","sha512":"5c6b640f74ebb8b12d26c1b080b926bae02af9d0990bee96b56ca74ef483cf0dbfedebf39963563d008fad1b717fa67804dcf22f7abb6b5975875fdf5dab9866","ssdeep":"","tlshash":"50210ac6c7985c4b853d6902fb6f70303ea6c26365274aa081da253ad132f6d5059187","first_seen":"2025-09-29T15:42:26.533485Z","last_seen":"2026-05-29T14:27:54.075566Z","times_seen":10,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"portal.aplicativogov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/rawline-500.ttf","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://portal.aplicativogov.com/recuperar/","date":"2026-01-27T12:00:21.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aplicativogov.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 21:20:02 GMT","end":"Sat, 04 Apr 2026 22:17:44 GMT"},"fingerprint":{"sha1":"B1:28:50:A6:DA:0D:26:35:31:16:3C:BC:2C:4E:8F:1A:FF:C6:6D:DD","sha256":"16:D8:34:40:58:0E:47:F2:04:72:E3:2F:A6:15:92:81:DB:8F:B8:AB:96:24:1F:FF:52:D0:9D:DA:97:2C:CD:D7"}}},"request":{"raw":"GET /recuperar/gov.br%20-%20Acesse%20sua%20conta_files/rawline-500.ttf HTTP/1.1\r\nHost: portal.aplicativogov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/rawline.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Tue, 27 Jan 2026 12:00:21 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=iso-8859-1\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=psZtbWTh9Spf4Gw%2ByCAAGZHSQztWTYsuO7Mu6I4K8KHcTOdMOOqYhQ8gls5yCZy8z5wyb7dHW1kTY5RoDDdS6kPguGoOA89zVX%2F4YworwzyTMXFNN6VTJA%3D%3D\"}]}\r\ncf-ray: 9c4816d43d20b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":311,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"957b6ddace47099197de6f55ca736b12","sha1":"51671f9bd5be9f7215932f63ba6ecca4f44e14c5","sha256":"f0808d12e9ba39d1e316ffa87891468d7691d4740cc6a4137fa8db1bb60cdd3a","sha512":"6e624c670ee09236be5920f2bef3aac70a44122d898af15e4c86da3c37028aaa68211e287695a24ae4dafa052d979688ad3ff6cdc0696639a5a486f1ff5059e0","ssdeep":"","tlshash":"9fe0e75d484333cf5811129039c251d1234813fe747dc7ec2cc6d087526853ecdc618c","first_seen":"2025-11-10T04:05:47.292071Z","last_seen":"2026-01-27T12:00:44.461459Z","times_seen":3,"resource_available":false,"data":null}},"time_used":427,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":427,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"portal.aplicativogov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/scripts.js.download","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://portal.aplicativogov.com/recuperar/","date":"2026-01-27T12:00:19.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aplicativogov.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 21:20:02 GMT","end":"Sat, 04 Apr 2026 22:17:44 GMT"},"fingerprint":{"sha1":"B1:28:50:A6:DA:0D:26:35:31:16:3C:BC:2C:4E:8F:1A:FF:C6:6D:DD","sha256":"16:D8:34:40:58:0E:47:F2:04:72:E3:2F:A6:15:92:81:DB:8F:B8:AB:96:24:1F:FF:52:D0:9D:DA:97:2C:CD:D7"}}},"request":{"raw":"GET /recuperar/gov.br%20-%20Acesse%20sua%20conta_files/scripts.js.download HTTP/1.1\r\nHost: portal.aplicativogov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal.aplicativogov.com/recuperar/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:00:20 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 02:46:20 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Eh3ctjY%2FHXcZ4an551zxgx5ZQvG96RNMEAX1N6xtvC9us89%2FtsI%2Bhzyv2xZLRT2Xm1XTdHox%2B7rLJbgRlTj0W5DcqbdzarszzVN%2Fbl72r5KYxtbtTY3lTg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\netag: W/\"19d8-63d3bad4af700\"\r\ncontent-encoding: br\r\ncontent-type: text/javascript\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9c4816cbec07b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6616,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"a11858375f79eaf9c6149c9fa7f0b88f","sha1":"60b56e0350cc43271c0f0ca044b3fb819a29f363","sha256":"e4b410190c1aec5ad657cef6d6f2de596d8653fd828c1e6fa96374f109a2478e","sha512":"b0706ab37df57198af5ae1a5cf33c5af69b3ff2301504f36f93af11203f007ebae1faa6d58a0d4359b0f8cd5124c1cca9bc71b55d6381fd66642f5d43330e101","ssdeep":"192:yFXnzC174foSM6w4KlAoyGWTTdJr94rDr9y7r85F:yZzB94rDrxF","tlshash":"1fd10d18bc45169649b733751beb400cffb95a535902c6a8b4acac802f74e6053bfebd","first_seen":"2024-08-20T05:40:53.210052Z","last_seen":"2026-05-29T14:27:54.041278Z","times_seen":11,"resource_available":true,"data":null}},"time_used":342,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":342,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"portal.aplicativogov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/rawline-600.ttf","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://portal.aplicativogov.com/recuperar/","date":"2026-01-27T12:00:21.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aplicativogov.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 21:20:02 GMT","end":"Sat, 04 Apr 2026 22:17:44 GMT"},"fingerprint":{"sha1":"B1:28:50:A6:DA:0D:26:35:31:16:3C:BC:2C:4E:8F:1A:FF:C6:6D:DD","sha256":"16:D8:34:40:58:0E:47:F2:04:72:E3:2F:A6:15:92:81:DB:8F:B8:AB:96:24:1F:FF:52:D0:9D:DA:97:2C:CD:D7"}}},"request":{"raw":"GET /recuperar/gov.br%20-%20Acesse%20sua%20conta_files/rawline-600.ttf HTTP/1.1\r\nHost: portal.aplicativogov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/rawline.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Tue, 27 Jan 2026 12:00:21 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=iso-8859-1\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s1PAs5pK591qOkEGyUtxUBsl9hnIx9vwIEEGXPrEiD4vIEu1YWkO8VcUjB4YP39A6jpCEIU5ZZA69xc%2FEyI6vvOJ%2BBSgHNeF9qwT%2FvriEWeingiAoP51RQ%3D%3D\"}]}\r\ncf-ray: 9c4816d42d1fb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":311,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"957b6ddace47099197de6f55ca736b12","sha1":"51671f9bd5be9f7215932f63ba6ecca4f44e14c5","sha256":"f0808d12e9ba39d1e316ffa87891468d7691d4740cc6a4137fa8db1bb60cdd3a","sha512":"6e624c670ee09236be5920f2bef3aac70a44122d898af15e4c86da3c37028aaa68211e287695a24ae4dafa052d979688ad3ff6cdc0696639a5a486f1ff5059e0","ssdeep":"","tlshash":"9fe0e75d484333cf5811129039c251d1234813fe747dc7ec2cc6d087526853ecdc618c","first_seen":"2025-11-10T04:05:47.292071Z","last_seen":"2026-01-27T12:00:44.461459Z","times_seen":3,"resource_available":false,"data":null}},"time_used":432,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":432,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"portal.aplicativogov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/rawline-700.ttf","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://portal.aplicativogov.com/recuperar/","date":"2026-01-27T12:00:21.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aplicativogov.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 21:20:02 GMT","end":"Sat, 04 Apr 2026 22:17:44 GMT"},"fingerprint":{"sha1":"B1:28:50:A6:DA:0D:26:35:31:16:3C:BC:2C:4E:8F:1A:FF:C6:6D:DD","sha256":"16:D8:34:40:58:0E:47:F2:04:72:E3:2F:A6:15:92:81:DB:8F:B8:AB:96:24:1F:FF:52:D0:9D:DA:97:2C:CD:D7"}}},"request":{"raw":"GET /recuperar/gov.br%20-%20Acesse%20sua%20conta_files/rawline-700.ttf HTTP/1.1\r\nHost: portal.aplicativogov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/rawline.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Tue, 27 Jan 2026 12:00:21 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=iso-8859-1\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b0yo2RnLEpvcv2ub%2BOLv4KkeyHj91Xerpq%2FpM79MQyPD1aySSEfovSsuP91TyVhW6hOpuhNax60LOkIk%2BB5%2BqjWv46U3N3vnROv7wpOVv%2FVMO6haWw19LQ%3D%3D\"}]}\r\ncf-ray: 9c4816d43d22b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":311,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"957b6ddace47099197de6f55ca736b12","sha1":"51671f9bd5be9f7215932f63ba6ecca4f44e14c5","sha256":"f0808d12e9ba39d1e316ffa87891468d7691d4740cc6a4137fa8db1bb60cdd3a","sha512":"6e624c670ee09236be5920f2bef3aac70a44122d898af15e4c86da3c37028aaa68211e287695a24ae4dafa052d979688ad3ff6cdc0696639a5a486f1ff5059e0","ssdeep":"","tlshash":"9fe0e75d484333cf5811129039c251d1234813fe747dc7ec2cc6d087526853ecdc618c","first_seen":"2025-11-10T04:05:47.292071Z","last_seen":"2026-01-27T12:00:44.461459Z","times_seen":3,"resource_available":false,"data":null}},"time_used":416,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":416,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"portal.aplicativogov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/govbr.png","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portal.aplicativogov.com/recuperar/","date":"2026-01-27T12:00:19.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aplicativogov.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 21:20:02 GMT","end":"Sat, 04 Apr 2026 22:17:44 GMT"},"fingerprint":{"sha1":"B1:28:50:A6:DA:0D:26:35:31:16:3C:BC:2C:4E:8F:1A:FF:C6:6D:DD","sha256":"16:D8:34:40:58:0E:47:F2:04:72:E3:2F:A6:15:92:81:DB:8F:B8:AB:96:24:1F:FF:52:D0:9D:DA:97:2C:CD:D7"}}},"request":{"raw":"GET /recuperar/gov.br%20-%20Acesse%20sua%20conta_files/govbr.png HTTP/1.1\r\nHost: portal.aplicativogov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal.aplicativogov.com/recuperar/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:00:19 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 02:46:15 GMT\r\netag: \"11c0-63d3bacfeabc0\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 4544\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 3957\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LUz6EYMGDUNDTtzEiep0q4HZG0MJy9tL0Ol%2BKVa8LoBKxMCpAHPiSe40jwC74h7X9KTQ1i2wG0IwX1z2pL9%2BUGxs%2BPA0qA3f%2B%2Bnzzj2DefJhhBYle1j5sA%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9c4816cb2bdbb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4544,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 87, 8-bit/color RGBA, non-interlaced","md5":"7acca116a82bcbaccfa71d1c1a348f68","sha1":"05768b47bc74212c4af54ca40f8446144703cacf","sha256":"74e7bdfc6cfd7a404d863a9e3188ea216887f795feb13a417b0bea5e2af2693a","sha512":"14eddb0004290b1a6f9fa7b4485a76f4081061b0619171cb089cd9203a7aaafb959c1e1e82f9eab2d1ecc6cb2aa26a4db9087a90117adfc386d2097e560e518a","ssdeep":"96:0Ya0Ts8onnTUbokZuG/5/8FZ1CCLkIYZixrvC8oNuoYS8V:0sQrwbvZX/p8FZE8PyuoMV","tlshash":"5d915ce2e7ca2a76b97e18f331e8e3f52e5d118514cea652323f240e10a179908b058d","first_seen":"2024-04-06T20:57:41Z","last_seen":"2026-05-29T14:27:54.076416Z","times_seen":14,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"portal.aplicativogov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/govbr-highcontrast.css","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://portal.aplicativogov.com/recuperar/","date":"2026-01-27T12:00:19.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aplicativogov.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 21:20:02 GMT","end":"Sat, 04 Apr 2026 22:17:44 GMT"},"fingerprint":{"sha1":"B1:28:50:A6:DA:0D:26:35:31:16:3C:BC:2C:4E:8F:1A:FF:C6:6D:DD","sha256":"16:D8:34:40:58:0E:47:F2:04:72:E3:2F:A6:15:92:81:DB:8F:B8:AB:96:24:1F:FF:52:D0:9D:DA:97:2C:CD:D7"}}},"request":{"raw":"GET /recuperar/gov.br%20-%20Acesse%20sua%20conta_files/govbr-highcontrast.css HTTP/1.1\r\nHost: portal.aplicativogov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal.aplicativogov.com/recuperar/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:00:19 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 02:46:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CSA4uV1FOINW4Tuif7fby7Dvxh5KtEBJA2Jbfft1jaGnBa7GgGKeskHxqySHJenASVRqTTl7qSMOXRxLsz%2FBrSjjGGPnFJlypjoKKyQAj5gKuZ%2BPXiYXcQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/css\r\nage: 3956\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"7d5-63d3bacef6980\"\r\ncf-ray: 9c4816cb2bd5b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2005,"size_decoded":0,"mime_type":"text/css","magic":"CSV ASCII text","md5":"76eb72af3a63d39a18db8a620d578a80","sha1":"21c01e0cdc3ab65d535e193d4a1b93f77d0c66e9","sha256":"5226d18b229be8d88be924201e721aa2f326e188d8b977724dc329b30581fe59","sha512":"49cc3ad06610f4cd014c47680bddfcf0a442d47f142f1f534d15136d99b76320332cfe96215006c194b4c5a380e38dba0c44b8deca95997cd51b46b8df033b91","ssdeep":"","tlshash":"0e41d345a193073721d74e68618dee701629fb77f10e8a3b232970abb2cf3705c23988","first_seen":"2025-09-29T15:42:26.66659Z","last_seen":"2026-05-29T14:27:54.06586Z","times_seen":9,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"portal.aplicativogov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/banrisul_logo.png","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portal.aplicativogov.com/recuperar/","date":"2026-01-27T12:00:19.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aplicativogov.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 21:20:02 GMT","end":"Sat, 04 Apr 2026 22:17:44 GMT"},"fingerprint":{"sha1":"B1:28:50:A6:DA:0D:26:35:31:16:3C:BC:2C:4E:8F:1A:FF:C6:6D:DD","sha256":"16:D8:34:40:58:0E:47:F2:04:72:E3:2F:A6:15:92:81:DB:8F:B8:AB:96:24:1F:FF:52:D0:9D:DA:97:2C:CD:D7"}}},"request":{"raw":"GET /recuperar/gov.br%20-%20Acesse%20sua%20conta_files/banrisul_logo.png HTTP/1.1\r\nHost: portal.aplicativogov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal.aplicativogov.com/recuperar/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:00:19 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 02:46:17 GMT\r\netag: \"34d-63d3bad1d3040\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 845\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 3957\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7gc8VA9P7GcPMGpqFNw9Az6X5GsAeeOfDHb4oJDEhsaojd6W8VTkxAYBNDrsLKEjNSZSFauMhV%2FwKUiJpxhz0RQqmYIoz318po%2BGfQkFMZTzGnCsrOeRpg%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9c4816cbcbf0b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":845,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"d5775c2de144ccc803d7148822b84d3a","sha1":"27381e5ad12a0e1b91816e88ab29b413a71d428d","sha256":"39a2eff85adfbb8a7bea0ec348571c72f70b5cfdb5b9025930b58ea5825be915","sha512":"d8dc9c8666f8d12a6c415e9f906a30a780f0094ba0d20b356db890781fb4b430151be5f64231710d74b3e51a1bcf4e5ee4303df0e28f45bc73d96154319a7f87","ssdeep":"","tlshash":"8f018aed1e110c55ee5fb351e5200d54ee734e1cd9166d70723490593d889981bc53f6","first_seen":"2025-09-29T15:42:26.568154Z","last_seen":"2026-05-29T14:27:54.082367Z","times_seen":9,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"portal.aplicativogov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/digitalsign_logo.png","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portal.aplicativogov.com/recuperar/","date":"2026-01-27T12:00:19.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aplicativogov.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 21:20:02 GMT","end":"Sat, 04 Apr 2026 22:17:44 GMT"},"fingerprint":{"sha1":"B1:28:50:A6:DA:0D:26:35:31:16:3C:BC:2C:4E:8F:1A:FF:C6:6D:DD","sha256":"16:D8:34:40:58:0E:47:F2:04:72:E3:2F:A6:15:92:81:DB:8F:B8:AB:96:24:1F:FF:52:D0:9D:DA:97:2C:CD:D7"}}},"request":{"raw":"GET /recuperar/gov.br%20-%20Acesse%20sua%20conta_files/digitalsign_logo.png HTTP/1.1\r\nHost: portal.aplicativogov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal.aplicativogov.com/recuperar/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:00:19 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 02:46:19 GMT\r\netag: \"263-63d3bad3bb4c0\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 611\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 3957\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WesxJGsWzby48iLVSTmuye8BUnD7jIA37urAVEOj2FttBTjLyEatu5J2fNwXKv1kV6H5hI3TUQC7MYyiO13%2FOVM2e11aXA9Ok3pxTeMlh%2BaReqNgEMR3Tw%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9c4816cbebffb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":611,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGB, interlaced","md5":"476b82b8af48f1c2f1460cd853e5bf2c","sha1":"d6539787891fda4171a6b4b0977340f96c9a5ca1","sha256":"dfa8eaa005829f0766179a2f7ac711ae6d5838ee3272b12574d65057d467defe","sha512":"5b95aad57606175d89548638ead1a59b6859eda9d687caaaba0f86b9cbd6445560fce213c7da4e439c0281f6e43be6d2c7c3b77e7d3d6be548d098502cf8e604","ssdeep":"","tlshash":"65f0479a4b481cd8fecc48a017756480b9150b6600dc47f5413dd5c505f2fc07c79f61","first_seen":"2025-09-29T15:42:26.511562Z","last_seen":"2026-05-29T14:27:54.056043Z","times_seen":10,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"portal.aplicativogov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/disponivel-na-apple-store.png","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portal.aplicativogov.com/recuperar/","date":"2026-01-27T12:00:19.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aplicativogov.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 21:20:02 GMT","end":"Sat, 04 Apr 2026 22:17:44 GMT"},"fingerprint":{"sha1":"B1:28:50:A6:DA:0D:26:35:31:16:3C:BC:2C:4E:8F:1A:FF:C6:6D:DD","sha256":"16:D8:34:40:58:0E:47:F2:04:72:E3:2F:A6:15:92:81:DB:8F:B8:AB:96:24:1F:FF:52:D0:9D:DA:97:2C:CD:D7"}}},"request":{"raw":"GET /recuperar/gov.br%20-%20Acesse%20sua%20conta_files/disponivel-na-apple-store.png HTTP/1.1\r\nHost: portal.aplicativogov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal.aplicativogov.com/recuperar/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:00:19 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 02:46:20 GMT\r\netag: \"1bb9-63d3bad4af700\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 7097\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 3956\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fUc9oAO9AZ%2FmqZS79uqZb%2FdzAygrf1BQel3Cq2iPcQO%2Fma2oIVrT14VwKD2T24ytuEVDbVC1QGe4vxKHjN0L08YPTrjfQEbzPeqZisVKVCLCNw7gSKYUPQ%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9c4816cbec05b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7097,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 59, 8-bit/color RGBA, non-interlaced","md5":"1e81b771567b025ec07d5cf841ce3970","sha1":"351ec1ad0e3bfc4833486983b94f4837ee57df69","sha256":"e5749aff54deef47a0c53ccd37e4e20826d4f94ffc17ceadf77df8e6a3d68786","sha512":"68d43274cba486b7afa30eea7ba0643850077e8ebf54fc3765b84f9d710965d002e667e52885a9511e54947f555f7ca935ddb1a50411bfda276da65dfda6cd8a","ssdeep":"96:ZO4gLINYKt3L9ZHjo9oD/wUpGKNc/CPb5oiXNKeBLKx1acBS7G0WPRysECrB6CK:ZOVMxtDDAOJ6AWmKeBrc47sPCCrB6p","tlshash":"76e1afe278d0e056619db590e1322e44d97fc4b6b0322682bda0f28a2d3559595f07ce","first_seen":"2025-09-29T15:42:26.517466Z","last_seen":"2026-05-29T14:27:54.039881Z","times_seen":8,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"portal.aplicativogov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/rawline-600.woff2","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://portal.aplicativogov.com/recuperar/","date":"2026-01-27T12:00:20.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aplicativogov.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 21:20:02 GMT","end":"Sat, 04 Apr 2026 22:17:44 GMT"},"fingerprint":{"sha1":"B1:28:50:A6:DA:0D:26:35:31:16:3C:BC:2C:4E:8F:1A:FF:C6:6D:DD","sha256":"16:D8:34:40:58:0E:47:F2:04:72:E3:2F:A6:15:92:81:DB:8F:B8:AB:96:24:1F:FF:52:D0:9D:DA:97:2C:CD:D7"}}},"request":{"raw":"GET /recuperar/gov.br%20-%20Acesse%20sua%20conta_files/rawline-600.woff2 HTTP/1.1\r\nHost: portal.aplicativogov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/rawline.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Tue, 27 Jan 2026 12:00:20 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=iso-8859-1\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GyTEcyEfMKy12u1zD4ca5lBx5axwVoGQ69K9Mr5i7Edcd4P3tL6WyaXhe6RbpFygrUk2lShaYcqexssvXCymYO71xsmnSVI4hTOCaCAHAfdaVf45%2F3NElg%3D%3D\"}]}\r\ncf-ray: 9c4816cecc85b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":311,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"957b6ddace47099197de6f55ca736b12","sha1":"51671f9bd5be9f7215932f63ba6ecca4f44e14c5","sha256":"f0808d12e9ba39d1e316ffa87891468d7691d4740cc6a4137fa8db1bb60cdd3a","sha512":"6e624c670ee09236be5920f2bef3aac70a44122d898af15e4c86da3c37028aaa68211e287695a24ae4dafa052d979688ad3ff6cdc0696639a5a486f1ff5059e0","ssdeep":"","tlshash":"9fe0e75d484333cf5811129039c251d1234813fe747dc7ec2cc6d087526853ecdc618c","first_seen":"2025-11-10T04:05:47.292071Z","last_seen":"2026-01-27T12:00:44.461459Z","times_seen":3,"resource_available":false,"data":null}},"time_used":386,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":386,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"portal.aplicativogov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sso.acesso.gov.br/assets/govbr/img/favicon.ico","fqdn":"sso.acesso.gov.br","domain":"acesso.gov.br","tld":"gov.br"},"ip":{"addr":"161.148.168.40","port":443,"asn":10954,"as":"SERVICO FEDERAL DE PROCESSAMENTO DE DADOS - SERPRO","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portal.aplicativogov.com/recuperar/","date":"2026-01-27T12:00:21.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sso.acesso.gov.br","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Nov 2025 09:39:41 GMT","end":"Tue, 17 Feb 2026 09:39:40 GMT"},"fingerprint":{"sha1":"CD:E0:E7:30:89:63:C7:41:8C:38:1B:7B:09:71:8C:AC:58:6B:E0:F0","sha256":"51:26:2C:5C:10:42:A1:61:FA:F1:F6:70:9B:8C:79:0E:BD:83:2C:C6:19:A7:36:2F:BA:A2:E2:5B:77:9C:48:62"}}},"request":{"raw":"GET /assets/govbr/img/favicon.ico HTTP/1.1\r\nHost: sso.acesso.gov.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal.aplicativogov.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: nginx/1.22.1\r\ndate: Tue, 27 Jan 2026 12:00:21 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 1150\r\nlast-modified: Tue, 23 Dec 2025 18:19:34 GMT\r\ncontent-security-policy: frame-ancestors 'none'; connect-src 'self' www.google-analytics.com newassets.hcaptcha.com hcaptcha.com serprobots.estaleiro.serpro.gov.br maps.googleapis.com; default-src 'self' https vlibras.gov.br dicionario2.vlibras.gov.br cdp.cloud.unity3d.com config.uca.cloud.unity3d.com traducao2.vlibras.gov.br newassets.hcaptcha.com hcaptcha.com www.google.com www.gstatic.com 'unsafe-inline' 'unsafe-eval' data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' ssl.google-analytics.com blob: www.google-analytics.com www.googletagmanager.com newassets.hcaptcha.com hcaptcha.com js.hcaptcha.com www.google.com www.gstatic.com barra.brasil.gov.br vlibras.gov.br serprobots.estaleiro.serpro.gov.br maps.googleapis.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com cdn.dsgovserprodesign.estaleiro.serpro.gov.br newassets.hcaptcha.com hcaptcha.com cdnjs.cloudflare.com vlibras.gov.br barra.brasil.gov.br serprobots.estaleiro.serpro.gov.br; img-src 'self' data: www.google-analytics.com newassets.hcaptcha.com hcaptcha.com www.gstatic.com vlibras.gov.br serprobots.estaleiro.serpro.gov.br maps.googleapis.com; font-src 'self' cdn.dsgovserprodesign.estaleiro.serpro.gov.br newassets.hcaptcha.com hcaptcha.com fonts.googleapis.com fonts.gstatic.com cdnjs.cloudflare.com barra.brasil.gov.br vlibras.gov.br; object-src 'none'; frame-src newassets.hcaptcha.com hcaptcha.com www.google.com serprobots.estaleiro.serpro.gov.br; upgrade-insecure-requests; block-all-mixed-content;\r\nx-cache-status: HIT\r\ncache-control: max-age=3600\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15768000\r\nSet-Cookie: TS4666e2e5027=0877702dbcab2000078ef41f5611875f28fdb130697fe672c0949fcc5ad2ec99b3933a36a967a97d08c1a63ef81130008df92d653af3bb80d53c071f7f3cb357f784c841dd7f59d365921b9f44d15cd29d0c0959db6f7e7ad2413e418c828a27; Path=/\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"cac1ad099e23d6368df346f6a9a14772","sha1":"d687b1489cc0b3bb4e09adcd74df1751634f6987","sha256":"da4287f66653db764574c63e0051c913623ffb9f23316df13ec89afd9f1dbf6f","sha512":"7e8c81917a8d931c6b1ed711f7e5410b49b3d99bf66f6275cec589be6643e8d474a722fb7b30786eac78fd3b3b6d888b405afea39830db59cadc81ec338255ce","ssdeep":"","tlshash":"eb218ba72a808558edad1f30a4591c4402dfbf22fcb0fa2d8e60b06657372da657558a","first_seen":"2024-04-06T20:57:41Z","last_seen":"2026-06-25T20:27:39.286516Z","times_seen":18,"resource_available":false,"data":null}},"time_used":804,"timings":{"blocked":0,"dns":14,"connect":236,"send":0,"wait":305,"receive":0,"ssl":249},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/conta_govbr_v2.jpg","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portal.aplicativogov.com/recuperar/","date":"2026-01-27T12:00:19.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aplicativogov.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 21:20:02 GMT","end":"Sat, 04 Apr 2026 22:17:44 GMT"},"fingerprint":{"sha1":"B1:28:50:A6:DA:0D:26:35:31:16:3C:BC:2C:4E:8F:1A:FF:C6:6D:DD","sha256":"16:D8:34:40:58:0E:47:F2:04:72:E3:2F:A6:15:92:81:DB:8F:B8:AB:96:24:1F:FF:52:D0:9D:DA:97:2C:CD:D7"}}},"request":{"raw":"GET /recuperar/gov.br%20-%20Acesse%20sua%20conta_files/conta_govbr_v2.jpg HTTP/1.1\r\nHost: portal.aplicativogov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal.aplicativogov.com/recuperar/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:00:19 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 02:46:15 GMT\r\netag: \"1979d-63d3bacfeabc0\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 104349\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\nage: 3956\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zKGMyWe59oohG%2B2aZI40f4QHXXaxBxySgSNJ6p73nvs4tbtwFrUWTzcLHhYz0Ntz6m6cP1Tb8LKL45OHQedskDFA5XbQZA2dO73f4yJ2h6yBMJh9EgLxZw%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9c4816cb3bdcb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":104349,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 869x628, components 3","md5":"d5cf5fcca73ded50d268e28dedaa3e61","sha1":"d036a6484f575cb0b0bb44349b2ca0b1a6084129","sha256":"887b514b3bc37f5124fd93515e024a3563a32fb02f293038bd305fab9b672e47","sha512":"92c2beb81ea4616bbb7fb11e3eaef757fb13621109d0d7cb98812a58af1cec0f558ccec891531c3a44f98f4a0586a6c12f20556fb83dac9377531d76774300d2","ssdeep":"1536:/vF2ivgHj4HtXelHAiUZ1PvwRM+us609f6B0LEHcMNMu/U2KlZ6c+9yHv:lgjOtXeaiuvwR7uC9f63srZ6cYyHv","tlshash":"2aa302a7870f9b83c5aa8f3301f3919b526c8132f45f8fb4e19161b9d6345c04bbe5a6","first_seen":"2024-12-26T11:41:05.741232Z","last_seen":"2026-07-18T11:41:58.843406Z","times_seen":22,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"portal.aplicativogov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/inter.png","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portal.aplicativogov.com/recuperar/","date":"2026-01-27T12:00:19.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aplicativogov.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 21:20:02 GMT","end":"Sat, 04 Apr 2026 22:17:44 GMT"},"fingerprint":{"sha1":"B1:28:50:A6:DA:0D:26:35:31:16:3C:BC:2C:4E:8F:1A:FF:C6:6D:DD","sha256":"16:D8:34:40:58:0E:47:F2:04:72:E3:2F:A6:15:92:81:DB:8F:B8:AB:96:24:1F:FF:52:D0:9D:DA:97:2C:CD:D7"}}},"request":{"raw":"GET /recuperar/gov.br%20-%20Acesse%20sua%20conta_files/inter.png HTTP/1.1\r\nHost: portal.aplicativogov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal.aplicativogov.com/recuperar/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:00:19 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 02:46:17 GMT\r\netag: \"1d08-63d3bad1d3040\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 7432\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 3957\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1BnI3ZMjCsLunbRkzLi5Vnr2kuiZkT2ZE%2BltJDbetninFEqo2WFp9xl2tBu6dWZsPUMTOyUkxYUE5VcmwHpghOOWCF9ir1R0kMR7aBawCWiplu8J9JU%2B6g%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9c4816cbdbf5b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7432,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit colormap, non-interlaced","md5":"2a9a68cd2f68239f068f2f281ae11f62","sha1":"508f770ad2c6837431f4553e4deb2f1176134f57","sha256":"a407860c57d92a10883d2f6260093e051649de7a60d1acc94c0a499558c66134","sha512":"d91fbcfecb3936b73641ff3373588f2e9e5184de60309557e63ac00c375cd8b85bfd8616354af88e9d9d22cea43e0f3624322247663ccc759c38406374d7c5e8","ssdeep":"96:xB72VHLhpHkTvLSkDDDYvwZY8dkOYwpeW7J0k0IpiFXoat2Cxbtd01SVsj/t:x0VH1pavHDwoeiHAW7ykQ1vxhG1SVo/t","tlshash":"1de15c84f98038d1550cceb934f9226536234a179ed07c36b8ee56f61f153e2ac5b4f5","first_seen":"2025-09-29T15:42:26.551168Z","last_seen":"2026-03-26T06:42:55.030361Z","times_seen":7,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"portal.aplicativogov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/CD.png","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portal.aplicativogov.com/recuperar/","date":"2026-01-27T12:00:19.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aplicativogov.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 21:20:02 GMT","end":"Sat, 04 Apr 2026 22:17:44 GMT"},"fingerprint":{"sha1":"B1:28:50:A6:DA:0D:26:35:31:16:3C:BC:2C:4E:8F:1A:FF:C6:6D:DD","sha256":"16:D8:34:40:58:0E:47:F2:04:72:E3:2F:A6:15:92:81:DB:8F:B8:AB:96:24:1F:FF:52:D0:9D:DA:97:2C:CD:D7"}}},"request":{"raw":"GET /recuperar/gov.br%20-%20Acesse%20sua%20conta_files/CD.png HTTP/1.1\r\nHost: portal.aplicativogov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal.aplicativogov.com/recuperar/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:00:19 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 02:46:18 GMT\r\netag: \"177-63d3bad2c7280\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 375\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 3956\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6O15aSw6aCECTqhXfBmfxhuIwesbknhh%2FtFCXHXATouE0tCUaKxMzY%2BqisPo5PN0soVOieGFBpX6HV8HxA%2BQ9pUH0Wc9x2Nguchl9AZbgRp%2FNKxlPbKKag%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9c4816cbdbf8b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":375,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"f67f6b14b7f850c32beb2fe44e5ef8af","sha1":"7a3758a408deaacf7def930c704609a1e635f24e","sha256":"3d081728cb6f2cc75f5e341712e4bd9382456858599c5912110bea23127deebf","sha512":"f99a51f6d3ab1648e0d8b7be38317c8b35cf69ca53a4fc0b600b68297d0c039b7761cb5e41660efb678ab8e133aad76c52c9430ebed80169c986be1635c143df","ssdeep":"","tlshash":"16e0f823fe48af4cfa46ab322aae3020d22f92a028e5c41c2c80e00a125282bc021e44","first_seen":"2025-09-14T23:30:10.594487Z","last_seen":"2026-07-18T11:41:58.833203Z","times_seen":39,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"portal.aplicativogov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/jquery-2.2.4.min.js.download","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://portal.aplicativogov.com/recuperar/","date":"2026-01-27T12:00:19.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aplicativogov.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 21:20:02 GMT","end":"Sat, 04 Apr 2026 22:17:44 GMT"},"fingerprint":{"sha1":"B1:28:50:A6:DA:0D:26:35:31:16:3C:BC:2C:4E:8F:1A:FF:C6:6D:DD","sha256":"16:D8:34:40:58:0E:47:F2:04:72:E3:2F:A6:15:92:81:DB:8F:B8:AB:96:24:1F:FF:52:D0:9D:DA:97:2C:CD:D7"}}},"request":{"raw":"GET /recuperar/gov.br%20-%20Acesse%20sua%20conta_files/jquery-2.2.4.min.js.download HTTP/1.1\r\nHost: portal.aplicativogov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal.aplicativogov.com/recuperar/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:00:20 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 02:46:20 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wl7Fi3IX%2Bh9BSMRMHnjGhdBXnM5bovK6EXlsuQHOzvLuaKMHybL6bjI7cZOxpfsLHM8snnvbLGgpzS0WdyG%2BuAimmgUC7vlqI%2FQ6L8lRAOFhjQ2bwU6G4g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\netag: W/\"14e4e-63d3bad4af700\"\r\ncontent-encoding: br\r\ncontent-type: text/javascript\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9c4816cbec06b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":85582,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32065), with CRLF line terminators","md5":"710458dd559c957714ac4a8e95357eb5","sha1":"f694238d616f579a0690001f37984af430c19963","sha256":"b409c14a10b4caad6b54844aa63a5faf748b83eecc2dd0d4fb1d913f8de55365","sha512":"282d65828a43bfe50fe0f9aea8bca3838ac1b5250e7c7c359c066e0428aa723f001d31c2463681b2ad6816a49a8571bf9f3ae29b2dc53adf1bbd7d5c4471322b","ssdeep":"1536:fYE1JVoiB9JqZdXXe2pD3PgoIiulrUn6Z6a4tfOR7WpfWBZPBJda4w9W3qG9a98N:u4J+rlfOhWpgCW6G9a98Hrp","tlshash":"3583c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","first_seen":"2023-03-07T01:03:07Z","last_seen":"2026-07-24T03:17:58.266101Z","times_seen":12805,"resource_available":true,"data":null}},"time_used":695,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":429,"receive":266,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"portal.aplicativogov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/qrcode.min.js.download","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://portal.aplicativogov.com/recuperar/","date":"2026-01-27T12:00:19.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aplicativogov.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 21:20:02 GMT","end":"Sat, 04 Apr 2026 22:17:44 GMT"},"fingerprint":{"sha1":"B1:28:50:A6:DA:0D:26:35:31:16:3C:BC:2C:4E:8F:1A:FF:C6:6D:DD","sha256":"16:D8:34:40:58:0E:47:F2:04:72:E3:2F:A6:15:92:81:DB:8F:B8:AB:96:24:1F:FF:52:D0:9D:DA:97:2C:CD:D7"}}},"request":{"raw":"GET /recuperar/gov.br%20-%20Acesse%20sua%20conta_files/qrcode.min.js.download HTTP/1.1\r\nHost: portal.aplicativogov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal.aplicativogov.com/recuperar/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:00:20 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 02:46:20 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bX2SzbJrd0bxphRseIeJnOc9AJavLvq%2FMPIy8fJZjYX3LmmPW7hCtm%2FEcLbjaaXj1H8yEleb%2FEw%2F8QKhy34lwpaYRe3e4TtQMwxQ5oOwH08bGtEzQAOTBQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\netag: W/\"4dd7-63d3bad4af700\"\r\ncontent-encoding: br\r\ncontent-type: text/javascript\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9c4816cbfc0bb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19927,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (19927), with no line terminators","md5":"517b55d3688ce9ef1085a3d9632bcb97","sha1":"2d06c1f823f34c19981c6ae0b0eb0f5861c5e14b","sha256":"c541ef06327885a8415bca8df6071e14189b4855336def4f36db54bde8484f36","sha512":"08d80845e706a3b9e985b799d3849cd7791ad3ba5aa9d793bb4591d4833890d7299810144874905f416c94d8530da74be0ee520066a91ade05a1da8bf0ccb498","ssdeep":"384:WRQ2kvcAAdTRhQLThP2yO9/9G84U5xOiKQYHHHsglDep9m1yfB8dKLMyA+LyUyy9:xThP2V/9N4U/gQYPXa8CAPLyrZ","tlshash":"8c92c7e4f36542f6915e6cd4283f104b64a0a4636c1490acbfb5c1e6a9f8fe0647af74","first_seen":"2023-03-07T01:14:56Z","last_seen":"2026-07-24T05:49:54.312159Z","times_seen":65604,"resource_available":true,"data":null}},"time_used":545,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":413,"receive":132,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"portal.aplicativogov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/hcaptcha.html","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://portal.aplicativogov.com/recuperar/","date":"2026-01-27T12:00:20.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aplicativogov.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 21:20:02 GMT","end":"Sat, 04 Apr 2026 22:17:44 GMT"},"fingerprint":{"sha1":"B1:28:50:A6:DA:0D:26:35:31:16:3C:BC:2C:4E:8F:1A:FF:C6:6D:DD","sha256":"16:D8:34:40:58:0E:47:F2:04:72:E3:2F:A6:15:92:81:DB:8F:B8:AB:96:24:1F:FF:52:D0:9D:DA:97:2C:CD:D7"}}},"request":{"raw":"GET /recuperar/gov.br%20-%20Acesse%20sua%20conta_files/hcaptcha.html HTTP/1.1\r\nHost: portal.aplicativogov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal.aplicativogov.com/recuperar/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:00:20 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 02:46:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NwG6ttRGTJNsZ8wu1n5sY65DjLkPY7sIllVcxDRpKAMgzYZQ1GNBBPXtd%2FmXzFshYhu0zRyOjUMMShynJ0GfEUnxJcPa4h1L4HAopitF6wrPYhYLpUkZLg%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncontent-type: text/html\r\ncf-ray: 9c4816cf2c92b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":443216,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (39278)","md5":"f906b809d289729426e8e79763e92bb4","sha1":"1041248119a7bae0dd63d85dcf8cfa590a76cad0","sha256":"86559f1031cc848adfd977670e20db672f9604a380708bf075208f98f29569db","sha512":"5dcc2cd26ae1b9e69b82d3e49d9945f6450b474b75535d0c5fcc2e42d1ec15ab6803888d181a251a06126b76c3bc481ddf1704d049076daad6be073f92a0916c","ssdeep":"6144:Lwkt/odhMaGVgFACvFSOkZaTiRGnRD1pd:Zt/baGEz/b","tlshash":"d4942baa7315303a41ea62e104af210fa3f6d4186546545cfa35ecea7c7d88e617bf3c","first_seen":"2025-11-10T04:05:47.305496Z","last_seen":"2026-01-27T12:00:44.474528Z","times_seen":3,"resource_available":false,"data":null}},"time_used":744,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":604,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-01-27","alert":"Hunting_JS_WebAssembly","trigger":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/hcaptcha.html","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"portal.aplicativogov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/nubank_logo.png","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portal.aplicativogov.com/recuperar/","date":"2026-01-27T12:00:19.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aplicativogov.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 21:20:02 GMT","end":"Sat, 04 Apr 2026 22:17:44 GMT"},"fingerprint":{"sha1":"B1:28:50:A6:DA:0D:26:35:31:16:3C:BC:2C:4E:8F:1A:FF:C6:6D:DD","sha256":"16:D8:34:40:58:0E:47:F2:04:72:E3:2F:A6:15:92:81:DB:8F:B8:AB:96:24:1F:FF:52:D0:9D:DA:97:2C:CD:D7"}}},"request":{"raw":"GET /recuperar/gov.br%20-%20Acesse%20sua%20conta_files/nubank_logo.png HTTP/1.1\r\nHost: portal.aplicativogov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal.aplicativogov.com/recuperar/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:00:19 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 02:46:16 GMT\r\netag: \"252-63d3bad0dee00\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 594\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 3957\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qwek1JOMWMJ0mMvMJaazpHXXUD56jDGjcY5H0V%2BHpwgNyGMqAjeXVgB9uhrRA3fTCtp6Y0CCN6EWwJranP1MNmmtS85c88Z2Xc9uGLRRSj1RDXfn0vw5yg%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9c4816cbcbecb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":594,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 26 x 26, 8-bit/color RGBA, non-interlaced","md5":"645a6416b73d43342a5ae8e61414e10c","sha1":"9da76fcd589a1ff9df9e23699eea986fba4528b4","sha256":"f2a130bfa8d6863e1b49d51c19236de5ccca54c3ebd1acbe8395d602ed49c204","sha512":"09201a67589c09c4a556af5371ba434ca69f8eb0dc51cfc8a124b6f19f6456a9bf0ecd682e870807a673608837ef8a4e86015623cc4a2e153c11bab3e6199654","ssdeep":"","tlshash":"9ff041f6b6a50cbef2c80422d085b0ab3ce37b7e223181268142c867bb24b00970630a","first_seen":"2025-09-29T15:42:26.49949Z","last_seen":"2026-05-29T14:27:54.068594Z","times_seen":8,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"portal.aplicativogov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/agibank_logo.png","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portal.aplicativogov.com/recuperar/","date":"2026-01-27T12:00:19.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aplicativogov.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 21:20:02 GMT","end":"Sat, 04 Apr 2026 22:17:44 GMT"},"fingerprint":{"sha1":"B1:28:50:A6:DA:0D:26:35:31:16:3C:BC:2C:4E:8F:1A:FF:C6:6D:DD","sha256":"16:D8:34:40:58:0E:47:F2:04:72:E3:2F:A6:15:92:81:DB:8F:B8:AB:96:24:1F:FF:52:D0:9D:DA:97:2C:CD:D7"}}},"request":{"raw":"GET /recuperar/gov.br%20-%20Acesse%20sua%20conta_files/agibank_logo.png HTTP/1.1\r\nHost: portal.aplicativogov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal.aplicativogov.com/recuperar/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:00:19 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 02:46:17 GMT\r\netag: \"865-63d3bad1d3040\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 2149\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 3956\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UvY%2F86CbSEr6j9W8AsxiZp2u2rDA199eGeZruaohq1x5pZPs6ShKCPmLjco%2Bj9rNYUTrwuVo3Hv%2FdMkxO4UcMx96LlDx5sUA%2BWLCAWW%2FqPpssdq78T5oqQ%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9c4816cbcbf1b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2149,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 23 x 16, 8-bit/color RGBA, non-interlaced","md5":"46d2614af915c097e6c429364d7a035c","sha1":"4957abb1baa4005e3c1fbce85a1435320760f632","sha256":"57c69ceddd37ad6ba6e61b595d4ecbeb8b9685798db0f1c45f085a3921451990","sha512":"a899e439dcb56420e7596c93fe1d764b82fdc9193129f5c0c60d5219d6b0d16e0b71fd13e9742a301c0dffb13e74dffc5118ee642998e4898cccf8c053ef346a","ssdeep":"","tlshash":"9a411ab28e9dcd664a0a600c153e4c80403b1d4cec8dae31bc3c905b6a31e73bb41a57","first_seen":"2025-09-29T15:42:26.549581Z","last_seen":"2026-05-29T14:27:54.063634Z","times_seen":9,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"portal.aplicativogov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/webfonts/fa-solid-900.ttf","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://portal.aplicativogov.com/recuperar/","date":"2026-01-27T12:00:21.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aplicativogov.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 21:20:02 GMT","end":"Sat, 04 Apr 2026 22:17:44 GMT"},"fingerprint":{"sha1":"B1:28:50:A6:DA:0D:26:35:31:16:3C:BC:2C:4E:8F:1A:FF:C6:6D:DD","sha256":"16:D8:34:40:58:0E:47:F2:04:72:E3:2F:A6:15:92:81:DB:8F:B8:AB:96:24:1F:FF:52:D0:9D:DA:97:2C:CD:D7"}}},"request":{"raw":"GET /recuperar/webfonts/fa-solid-900.ttf HTTP/1.1\r\nHost: portal.aplicativogov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Tue, 27 Jan 2026 12:00:21 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=iso-8859-1\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LPIjQMPtMt8hGYggw4VG%2F3wXorodM5yPz%2FVZTqYhSqWYb4hg0PjSdcWbckz7qRArqr0FNev4JX0of0R9%2Fwohz3M0ZwshjeprdMIR5mJLYuHIuup7qFp6ew%3D%3D\"}]}\r\ncf-ray: 9c4816d43d24b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":311,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"957b6ddace47099197de6f55ca736b12","sha1":"51671f9bd5be9f7215932f63ba6ecca4f44e14c5","sha256":"f0808d12e9ba39d1e316ffa87891468d7691d4740cc6a4137fa8db1bb60cdd3a","sha512":"6e624c670ee09236be5920f2bef3aac70a44122d898af15e4c86da3c37028aaa68211e287695a24ae4dafa052d979688ad3ff6cdc0696639a5a486f1ff5059e0","ssdeep":"","tlshash":"9fe0e75d484333cf5811129039c251d1234813fe747dc7ec2cc6d087526853ecdc618c","first_seen":"2025-11-10T04:05:47.292071Z","last_seen":"2026-01-27T12:00:44.461459Z","times_seen":3,"resource_available":false,"data":null}},"time_used":392,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":392,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"portal.aplicativogov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/InternetBanking-green.png","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portal.aplicativogov.com/recuperar/","date":"2026-01-27T12:00:19.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aplicativogov.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 21:20:02 GMT","end":"Sat, 04 Apr 2026 22:17:44 GMT"},"fingerprint":{"sha1":"B1:28:50:A6:DA:0D:26:35:31:16:3C:BC:2C:4E:8F:1A:FF:C6:6D:DD","sha256":"16:D8:34:40:58:0E:47:F2:04:72:E3:2F:A6:15:92:81:DB:8F:B8:AB:96:24:1F:FF:52:D0:9D:DA:97:2C:CD:D7"}}},"request":{"raw":"GET /recuperar/gov.br%20-%20Acesse%20sua%20conta_files/InternetBanking-green.png HTTP/1.1\r\nHost: portal.aplicativogov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal.aplicativogov.com/recuperar/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:00:19 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 02:46:15 GMT\r\netag: \"1e3-63d3bacfeabc0\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 483\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 3956\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yqJC1WvM%2B1kIyHSwLIJCRiH2SGn4dbO%2FmxL88BbMe3IG3Uf1PYakuBvqZ2Q6T7vqGuG7%2FXse8E9MXNdG6LVqQqWBkAvcYW9x8ITwb6PtVIvpdvQihzoJzg%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9c4816cb3be0b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":483,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"a3da03a40de30d468dc77b076ff109da","sha1":"47adaf54673a420c46f1b0922c098c92dc821868","sha256":"20a963840d4d2bdab42ee9dfb79c41b7cc6a93d4eefe9a913a1af04ef9f89b77","sha512":"26ea41e33e50aea1ab510c512f3e95615705f0ae741906ca2e70a89536f571ea8cefea2bd157bece91dc70877360470b05e13431ccb2bda0eb553b414f2283f4","ssdeep":"","tlshash":"69f054f757304b0e498af52f829f60952187d4359088d2a6581fd8a1063f10416dcf92","first_seen":"2025-03-10T12:11:26.136477Z","last_seen":"2026-07-18T11:41:58.844275Z","times_seen":44,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"portal.aplicativogov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/bb_logo.png","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portal.aplicativogov.com/recuperar/","date":"2026-01-27T12:00:19.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aplicativogov.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 21:20:02 GMT","end":"Sat, 04 Apr 2026 22:17:44 GMT"},"fingerprint":{"sha1":"B1:28:50:A6:DA:0D:26:35:31:16:3C:BC:2C:4E:8F:1A:FF:C6:6D:DD","sha256":"16:D8:34:40:58:0E:47:F2:04:72:E3:2F:A6:15:92:81:DB:8F:B8:AB:96:24:1F:FF:52:D0:9D:DA:97:2C:CD:D7"}}},"request":{"raw":"GET /recuperar/gov.br%20-%20Acesse%20sua%20conta_files/bb_logo.png HTTP/1.1\r\nHost: portal.aplicativogov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal.aplicativogov.com/recuperar/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:00:19 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 02:46:16 GMT\r\netag: \"58f-63d3bad0dee00\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 1423\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 3956\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IACQOqhM5ZUFFnX82Eo4jLoh5Z2MHlPpXX%2FPbW%2B7r38XC%2BJTHV5%2Bfbb9hochm9t%2Ff%2Bs6zxY2InW3Qc5SB5Hq%2F56keiLHl1Hfs3gsLyj4wvRG2TmuA0Hnfw%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9c4816cb3bdfb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1423,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"8035219c05a33c547c3156772aa6ea8e","sha1":"fb231c2f61d779cf246b51958028b304d851f59d","sha256":"6500f184e823f5cbf18ae44e70e5de1bb5330989e1dac16ac9f430f7ea0413af","sha512":"4965d0c768c62149efd8d1b8209b261697118d8d5a9224e2189404ce6a38d541a678f37c7451a80a0dc6ab538d7443a1b05f1e7d7ea5a3003517c699d7bb60f7","ssdeep":"","tlshash":"5f211bd2bb9d4e7769b13e076c315931c96686ed24d4bb140301c43bd53c8940468d8d","first_seen":"2025-09-29T15:42:26.690962Z","last_seen":"2026-05-29T14:27:54.047849Z","times_seen":9,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"portal.aplicativogov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/cef_logo.png","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portal.aplicativogov.com/recuperar/","date":"2026-01-27T12:00:19.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aplicativogov.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 21:20:02 GMT","end":"Sat, 04 Apr 2026 22:17:44 GMT"},"fingerprint":{"sha1":"B1:28:50:A6:DA:0D:26:35:31:16:3C:BC:2C:4E:8F:1A:FF:C6:6D:DD","sha256":"16:D8:34:40:58:0E:47:F2:04:72:E3:2F:A6:15:92:81:DB:8F:B8:AB:96:24:1F:FF:52:D0:9D:DA:97:2C:CD:D7"}}},"request":{"raw":"GET /recuperar/gov.br%20-%20Acesse%20sua%20conta_files/cef_logo.png HTTP/1.1\r\nHost: portal.aplicativogov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal.aplicativogov.com/recuperar/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:00:19 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 02:46:16 GMT\r\netag: \"43a-63d3bad0dee00\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 1082\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 3956\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FrxXzwmwxLKN6QR0nsjjgFBsHoqosTc5s4D9%2F77p0nZ1vEhlbxN%2FWXQw8ZRxldyE8%2BiVBpv67%2BVy8iCpJJSUNwimTyMJOQVf5ym09n3ttillS%2BVp7iBKtA%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9c4816cb4be2b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1082,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"0320ecd3a0d701c76fed658ef454ed00","sha1":"965c46055aba39be31b85fcffebbdf54f4e19211","sha256":"9052249e83168dd2f68c853fb06d94cc1273c11001da8de2b0417e34f764718b","sha512":"862f04bac331d92a9911f082440527fcfb316571d4f33d78b1be8d578b638369ebf7844b8b19136e29b71cddef35a25f37da99645df65b4756a5cf8670553cc2","ssdeep":"","tlshash":"cc11ecefe9500564416e35b271c13f55d8675f39586d840fd9229808b9c0eec43e570f","first_seen":"2025-09-29T15:42:26.656546Z","last_seen":"2026-05-29T14:27:54.081241Z","times_seen":9,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"portal.aplicativogov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/btgpactual_logo.png","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portal.aplicativogov.com/recuperar/","date":"2026-01-27T12:00:19.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aplicativogov.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 21:20:02 GMT","end":"Sat, 04 Apr 2026 22:17:44 GMT"},"fingerprint":{"sha1":"B1:28:50:A6:DA:0D:26:35:31:16:3C:BC:2C:4E:8F:1A:FF:C6:6D:DD","sha256":"16:D8:34:40:58:0E:47:F2:04:72:E3:2F:A6:15:92:81:DB:8F:B8:AB:96:24:1F:FF:52:D0:9D:DA:97:2C:CD:D7"}}},"request":{"raw":"GET /recuperar/gov.br%20-%20Acesse%20sua%20conta_files/btgpactual_logo.png HTTP/1.1\r\nHost: portal.aplicativogov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal.aplicativogov.com/recuperar/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:00:19 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 02:46:17 GMT\r\netag: \"aba-63d3bad1d3040\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 2746\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 3956\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZTcAr1XiR8Rge1FVl6RaV0TEVIt3FZ1n0AWQ7YPDpm7MurHFNBHhjGFIOqeT29PBZMssdznvpNnyASycpTJWNjAw7jGy%2Fo0RWGiGBBM1AEYCyZ3ReBTUkw%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9c4816cbdbf4b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2746,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"f3f1db288dc270f220656a849ca79e7b","sha1":"eb8509fb51c148a4c6ce5c278db8510bdf5f1447","sha256":"18ad4085fb2fc680d5de1d54397e7a54b5e6c9a37e0cdc1d0dc5a474f73d61c4","sha512":"ebb14d72612bdfbe24b7901628f19a5856d7beedf149a0e26ac0e97d0a8775b66e98cc801e2b08a2ee0731ce9ab90e28b70dd59b77ba0efedf3c1a6184e56007","ssdeep":"","tlshash":"cb511a990aa063d0d0c93bb191d962825063e7a67a0ee101b3accde33e8f501559bfce","first_seen":"2025-09-29T15:42:26.574707Z","last_seen":"2026-05-29T14:27:54.060339Z","times_seen":8,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"portal.aplicativogov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/c6-bank.png","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portal.aplicativogov.com/recuperar/","date":"2026-01-27T12:00:19.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aplicativogov.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 21:20:02 GMT","end":"Sat, 04 Apr 2026 22:17:44 GMT"},"fingerprint":{"sha1":"B1:28:50:A6:DA:0D:26:35:31:16:3C:BC:2C:4E:8F:1A:FF:C6:6D:DD","sha256":"16:D8:34:40:58:0E:47:F2:04:72:E3:2F:A6:15:92:81:DB:8F:B8:AB:96:24:1F:FF:52:D0:9D:DA:97:2C:CD:D7"}}},"request":{"raw":"GET /recuperar/gov.br%20-%20Acesse%20sua%20conta_files/c6-bank.png HTTP/1.1\r\nHost: portal.aplicativogov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal.aplicativogov.com/recuperar/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:00:19 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 02:46:17 GMT\r\netag: \"1f6-63d3bad1d3040\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 502\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 3957\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OQdrBIgPZG0G7fGDykvrUboLjG8I3yipRc%2FIBfJVk9%2Fq%2FLv5RRl%2BODtsoIbAY7bs2%2FPUP7Cp%2FcHS%2B6UrMDB%2FYLTgWo16cOeKN50iNW%2B3MJGaI0UIglLDLA%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9c4816cbdbf6b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":502,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"336cf020a00721d22566347e9a25abac","sha1":"a59f3f8fc9cc934f7d1c53669c565a511f2db92d","sha256":"85223493328c5ccc433ebb7b64079642f97ddab8ed965e3dea9753fa6696d361","sha512":"57eae5c680a00a0f76936caf59a34cf7e3c8fe1bdfe57dd99c38b7710cc173912eef4011d38634f4e9d420fc7185407f1164900172271a2a4779f483062b76ce","ssdeep":"","tlshash":"62f00ecc1429c43fc01e282b4aa31220f63d846e3512a84e65d22028b6879288b9ab6b","first_seen":"2025-09-29T15:42:26.552977Z","last_seen":"2026-03-26T06:42:55.005931Z","times_seen":7,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"portal.aplicativogov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/rawline.css","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://portal.aplicativogov.com/recuperar/","date":"2026-01-27T12:00:19.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aplicativogov.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 21:20:02 GMT","end":"Sat, 04 Apr 2026 22:17:44 GMT"},"fingerprint":{"sha1":"B1:28:50:A6:DA:0D:26:35:31:16:3C:BC:2C:4E:8F:1A:FF:C6:6D:DD","sha256":"16:D8:34:40:58:0E:47:F2:04:72:E3:2F:A6:15:92:81:DB:8F:B8:AB:96:24:1F:FF:52:D0:9D:DA:97:2C:CD:D7"}}},"request":{"raw":"GET /recuperar/gov.br%20-%20Acesse%20sua%20conta_files/rawline.css HTTP/1.1\r\nHost: portal.aplicativogov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal.aplicativogov.com/recuperar/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:00:19 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 02:46:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qCL75FpNIzlacm555eGUIio2esTcsNUU6sDSqSqv%2FhJklqSEtetp6ATai2oqIV0UN4h6U6M9ub%2B2e6Fw%2FAOAHfqjtqwBhfo127nmMxnc3IAPrn0MrvHg4Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/css\r\nage: 3956\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"1b0c-63d3bacef6980\"\r\ncf-ray: 9c4816cb1bd4b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6924,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"fb27565e5d398ed21cfc8529a139949b","sha1":"91515c0c2f806f5507cd541804d1b840d7ca99fb","sha256":"dbf50a3afc85fb9e2e5faa61c0b11c210bec43a7330a8471fb6492f4ea726222","sha512":"5f72780576583c3c1511d93fea03d0ed43a4ba3ace18d22a5768b84c867be4391df21ca3a7ba0eb46ac84b3913330ee784e6e5a185587f56717a2fb47883e8a2","ssdeep":"192:cEJ8EtrVCCJGw7fPgYZwExLJXb4W5K4fHj4cpUv:J82VxG0P5wiJXKgjNUv","tlshash":"9be15f20c50b28839671192d13e33f64aa5f7127525a8a33f278ca5d7f76d58c2d0f2c","first_seen":"2025-09-29T15:42:26.573062Z","last_seen":"2026-05-29T14:27:54.028199Z","times_seen":8,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"portal.aplicativogov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/govbr-templates.css","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://portal.aplicativogov.com/recuperar/","date":"2026-01-27T12:00:19.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aplicativogov.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 21:20:02 GMT","end":"Sat, 04 Apr 2026 22:17:44 GMT"},"fingerprint":{"sha1":"B1:28:50:A6:DA:0D:26:35:31:16:3C:BC:2C:4E:8F:1A:FF:C6:6D:DD","sha256":"16:D8:34:40:58:0E:47:F2:04:72:E3:2F:A6:15:92:81:DB:8F:B8:AB:96:24:1F:FF:52:D0:9D:DA:97:2C:CD:D7"}}},"request":{"raw":"GET /recuperar/gov.br%20-%20Acesse%20sua%20conta_files/govbr-templates.css HTTP/1.1\r\nHost: portal.aplicativogov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal.aplicativogov.com/recuperar/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:00:19 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 02:46:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dr6aKCUDtxelRVrYUd8JT1oJJn0feE3YjV2GS7TPg4m94SMt%2FzyRmOTPFRhIRaPV53%2BU8sFo5jkM3PqMj2p8fgNxAqiJOF8Rc08bbLJ9JPVb4k5MgIka2Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/css\r\nage: 3956\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"4ed5-63d3bacef6980\"\r\ncf-ray: 9c4816cb2bd6b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20181,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"f753561a14084594bbb5cd4bc207f25a","sha1":"939abbe48ba32d6738982c3dd328538b33863216","sha256":"fdb8bb578da1de6ea110268e3e5b5a019ed54ce5bf4f114ea702bf9c81be032e","sha512":"796db590cf34f1968a704dac82dadb20962c3b7a5813c14f46df680fbe7deb8ee4f4320d8c16fa50f06f341d7a5e157d6de12942053b20a3a373b2771ca4c15f","ssdeep":"384:aU3M2o1qkEl1txZHjZnjJcF/Ff2FYF3wdf61JKq:aU3WEl1txZHjZVcF/Ff2+FgdwJV","tlshash":"ee9243961ae4050aa80bc45829e2db21335d9403998fcefa7ee5319cefce7c558727cd","first_seen":"2025-11-10T04:05:47.284728Z","last_seen":"2026-01-27T12:00:44.479953Z","times_seen":3,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"portal.aplicativogov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/mercantil_logo.png","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portal.aplicativogov.com/recuperar/","date":"2026-01-27T12:00:19.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aplicativogov.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 21:20:02 GMT","end":"Sat, 04 Apr 2026 22:17:44 GMT"},"fingerprint":{"sha1":"B1:28:50:A6:DA:0D:26:35:31:16:3C:BC:2C:4E:8F:1A:FF:C6:6D:DD","sha256":"16:D8:34:40:58:0E:47:F2:04:72:E3:2F:A6:15:92:81:DB:8F:B8:AB:96:24:1F:FF:52:D0:9D:DA:97:2C:CD:D7"}}},"request":{"raw":"GET /recuperar/gov.br%20-%20Acesse%20sua%20conta_files/mercantil_logo.png HTTP/1.1\r\nHost: portal.aplicativogov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal.aplicativogov.com/recuperar/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:00:19 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 02:46:17 GMT\r\netag: \"4a6-63d3bad1d3040\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 1190\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 3956\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AfBaUiEda1iiIBCBu%2FMa40YnO5T0RP3yU%2Fqmv%2BQ6uvMXCstx%2FvRXQ50kQmlrzcRTTRrHpn1MehNVI3tY0HX0BbUfM8N7Ib%2F%2FAgX9VN3uxCmhX4geJVwK7g%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9c4816cbdbf3b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1190,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"83be306030278842785a81ed9db99441","sha1":"e221ba72c5e87bb9027184958a50ed0f01af771e","sha256":"efc7b36d184044d976f18947add73b51d42cae86672d4a6579d9e5868b345e5e","sha512":"63495158f19e4d6339203c09f74d0da90229a57e2adfcdc0d6b520aab264f4802dc10f26423971f1063c4e95c83af0976a1f71bec6175eb58911db28542155b8","ssdeep":"","tlshash":"69216784df810455c39e3e7784dd07469cb2c2419f40850e7c4d88a71f401c91d1f28b","first_seen":"2025-09-29T15:42:26.563364Z","last_seen":"2026-05-29T14:27:54.044362Z","times_seen":9,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"portal.aplicativogov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/vidaas_logo.png","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portal.aplicativogov.com/recuperar/","date":"2026-01-27T12:00:19.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aplicativogov.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 21:20:02 GMT","end":"Sat, 04 Apr 2026 22:17:44 GMT"},"fingerprint":{"sha1":"B1:28:50:A6:DA:0D:26:35:31:16:3C:BC:2C:4E:8F:1A:FF:C6:6D:DD","sha256":"16:D8:34:40:58:0E:47:F2:04:72:E3:2F:A6:15:92:81:DB:8F:B8:AB:96:24:1F:FF:52:D0:9D:DA:97:2C:CD:D7"}}},"request":{"raw":"GET /recuperar/gov.br%20-%20Acesse%20sua%20conta_files/vidaas_logo.png HTTP/1.1\r\nHost: portal.aplicativogov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal.aplicativogov.com/recuperar/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:00:19 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 02:46:19 GMT\r\netag: \"1748-63d3bad3bb4c0\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 5960\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 3956\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3oLYcsd7rpIyXDUA5yzjwT9KOdMjR96HuP0HvceFajqUr8kaNstNTvM0l%2FE4GUSTG2ztSU%2BhXJVccxgIeUIyFKNdWArWuUz4%2B7KgP%2BBoRPgnB7JsDCsHFw%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9c4816cbebfeb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5960,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit colormap, non-interlaced","md5":"8c762e52b030d3f0c59e91a4378545ca","sha1":"e0b9e88c247c7e5b0a5598b9fc56a0fd5e40fa69","sha256":"919857d632f88dfe1ec0a087535f8e0ee4645619d6774d8b1bf12ead63a5be4b","sha512":"c37d713c48d5f62df5ad97656e4c34dc4ff652f00963b274c73c01868dfdf6df9b2f35b92c538739d23cf914a651ff4b7371f69c2f17c73db8162f711355879a","ssdeep":"96:y8Gnxh1qcHJLyHxtzNqlHlD0kKGWraWtndsF6Gt9qIr7DUIPCxhk4qhSigxyj+rj:OxhDHVUxTqlHhbWGWtPTIr7tPhh7gxyO","tlshash":"12c1ae3b1986b360ec3d0c097a8b14b1a5b74f409f8e61fe2c20f85136ecb09252174f","first_seen":"2025-09-29T15:42:26.5193Z","last_seen":"2026-05-29T14:27:54.070721Z","times_seen":10,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"portal.aplicativogov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/disponivel-no-google-play.png","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portal.aplicativogov.com/recuperar/","date":"2026-01-27T12:00:19.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aplicativogov.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 21:20:02 GMT","end":"Sat, 04 Apr 2026 22:17:44 GMT"},"fingerprint":{"sha1":"B1:28:50:A6:DA:0D:26:35:31:16:3C:BC:2C:4E:8F:1A:FF:C6:6D:DD","sha256":"16:D8:34:40:58:0E:47:F2:04:72:E3:2F:A6:15:92:81:DB:8F:B8:AB:96:24:1F:FF:52:D0:9D:DA:97:2C:CD:D7"}}},"request":{"raw":"GET /recuperar/gov.br%20-%20Acesse%20sua%20conta_files/disponivel-no-google-play.png HTTP/1.1\r\nHost: portal.aplicativogov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal.aplicativogov.com/recuperar/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:00:19 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 02:46:20 GMT\r\netag: \"1e46-63d3bad4af700\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 7750\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 3956\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ryPvNVWLOGmNF1mmDnK%2FReg1UdhFU%2BVsAWSY%2F%2FyiMtRV4z512H3oIqrvHAONXsYun%2F4GSvzKB2bT7Bo8ka2E4hihJ6VOQ%2BhOXqZXPrNcI%2BvMKnTJr5F%2FYQ%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9c4816cbec04b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7750,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 59, 8-bit/color RGBA, non-interlaced","md5":"0ab4b048a1b90dc9801609ea29b1d7c6","sha1":"c3609071162c3b06b0222e0d671c3b1137a9cd83","sha256":"5341a814fd12c21e667f5559424f6dd84eafc770969a98ab241df6bb4d130a8e","sha512":"452ff7e4c58fcd78db08f5b2cbe95199280b90d170b5a823fe6fa6b970f17ce8b0401e17e2490841be517e6c00cdad884d427efbbe1a021328fb0a3e376fe1df","ssdeep":"192:Wrnky/AZW2LgLrFXW8A4vpKlAj9A/VzY+PCmnY+4SRXOY+vE:SAZWYgLrFG16vj9mnPZnp4S1Ohs","tlshash":"83f18ef027334e95e71e27e9ff883f28f87ba1a5222185718b1f98b0d040d658860f49","first_seen":"2024-10-27T05:25:47.444633Z","last_seen":"2026-06-02T09:04:47.236141Z","times_seen":11,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"portal.aplicativogov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/hcaptcha(1).html","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://portal.aplicativogov.com/recuperar/","date":"2026-01-27T12:00:20.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aplicativogov.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 21:20:02 GMT","end":"Sat, 04 Apr 2026 22:17:44 GMT"},"fingerprint":{"sha1":"B1:28:50:A6:DA:0D:26:35:31:16:3C:BC:2C:4E:8F:1A:FF:C6:6D:DD","sha256":"16:D8:34:40:58:0E:47:F2:04:72:E3:2F:A6:15:92:81:DB:8F:B8:AB:96:24:1F:FF:52:D0:9D:DA:97:2C:CD:D7"}}},"request":{"raw":"GET /recuperar/gov.br%20-%20Acesse%20sua%20conta_files/hcaptcha(1).html HTTP/1.1\r\nHost: portal.aplicativogov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal.aplicativogov.com/recuperar/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:00:20 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 02:46:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3XaxwDCdh4O%2BpQGH0NA2r9cjXenEyiFsRhw4dJD2uN9wQuvAxtK4BEuj64o%2BWn6u%2FApkqHnu3W%2FV9yZ%2B3HkViCapNtRcp5vUI6VrfMHke%2Fit5nj0IJGdtw%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncontent-type: text/html\r\ncf-ray: 9c4816d07cbcb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":500310,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (39259)","md5":"b08674fa6c9822523c7fd93bb7577e5e","sha1":"0caad26c11abf1496c68f289fe305438f4d06eb2","sha256":"0f6edf3fcfc7afa7d2573481de27a1cee214170f67142cc3cb89d8ac4e122862","sha512":"cc2c01d66fea5c841d6db7a913d737414e2ec7bc1589529460ca20e381b43609c5512671d91e50f8953345e60f5da597befbd5422044a87d2d517efc2ff3bda3","ssdeep":"6144:Nwkt/odhMaGVgFACvFSOkZaTiRGnRD1pF:Ht/baGEz/j","tlshash":"bab41a667204303a51eb62e114af260f63b6d118a547405cfa75ece6bcbe88d647bf3c","first_seen":"2025-11-10T04:05:47.291083Z","last_seen":"2026-01-27T12:00:44.482445Z","times_seen":3,"resource_available":false,"data":null}},"time_used":643,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":118,"receive":525,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-01-27","alert":"Hunting_JS_WebAssembly","trigger":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/hcaptcha(1).html","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"portal.aplicativogov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/webfonts/fa-solid-900.woff","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://portal.aplicativogov.com/recuperar/","date":"2026-01-27T12:00:20.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aplicativogov.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 21:20:02 GMT","end":"Sat, 04 Apr 2026 22:17:44 GMT"},"fingerprint":{"sha1":"B1:28:50:A6:DA:0D:26:35:31:16:3C:BC:2C:4E:8F:1A:FF:C6:6D:DD","sha256":"16:D8:34:40:58:0E:47:F2:04:72:E3:2F:A6:15:92:81:DB:8F:B8:AB:96:24:1F:FF:52:D0:9D:DA:97:2C:CD:D7"}}},"request":{"raw":"GET /recuperar/webfonts/fa-solid-900.woff HTTP/1.1\r\nHost: portal.aplicativogov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Tue, 27 Jan 2026 12:00:21 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=iso-8859-1\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jWsQdWYPefodEF7QNF9UvYmzSzEI4Eq5LPn2vLXWScGrpi%2BrlLFSejbIMEk7VdduZ0t9wpvDCqNwZFFehtZvUF6yVmoIzpx7d7aN2np51LCzxXT7YlJVdQ%3D%3D\"}]}\r\ncf-ray: 9c4816d16cd7b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":311,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"957b6ddace47099197de6f55ca736b12","sha1":"51671f9bd5be9f7215932f63ba6ecca4f44e14c5","sha256":"f0808d12e9ba39d1e316ffa87891468d7691d4740cc6a4137fa8db1bb60cdd3a","sha512":"6e624c670ee09236be5920f2bef3aac70a44122d898af15e4c86da3c37028aaa68211e287695a24ae4dafa052d979688ad3ff6cdc0696639a5a486f1ff5059e0","ssdeep":"","tlshash":"9fe0e75d484333cf5811129039c251d1234813fe747dc7ec2cc6d087526853ecdc618c","first_seen":"2025-11-10T04:05:47.292071Z","last_seen":"2026-01-27T12:00:44.461459Z","times_seen":3,"resource_available":false,"data":null}},"time_used":412,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":412,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"portal.aplicativogov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/all.min.css","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://portal.aplicativogov.com/recuperar/","date":"2026-01-27T12:00:19.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aplicativogov.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 21:20:02 GMT","end":"Sat, 04 Apr 2026 22:17:44 GMT"},"fingerprint":{"sha1":"B1:28:50:A6:DA:0D:26:35:31:16:3C:BC:2C:4E:8F:1A:FF:C6:6D:DD","sha256":"16:D8:34:40:58:0E:47:F2:04:72:E3:2F:A6:15:92:81:DB:8F:B8:AB:96:24:1F:FF:52:D0:9D:DA:97:2C:CD:D7"}}},"request":{"raw":"GET /recuperar/gov.br%20-%20Acesse%20sua%20conta_files/all.min.css HTTP/1.1\r\nHost: portal.aplicativogov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal.aplicativogov.com/recuperar/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:00:19 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 02:46:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LaNLyqRVgHwmeKmfa4cZ5LLGALzpM8QvG5rfAAlC2RBph5w9UqPZp6VIqVSp4NfrDdPWj19aKTR2d3J0b%2FkMcHP1HOR5bQsXIY7rSR9vY2fP3p2tCZgIWw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/css\r\nage: 3956\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"e4d2-63d3bacef6980\"\r\ncf-ray: 9c4816cb1bd3b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58578,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (58392)","md5":"76cb46c10b6c0293433b371bae2414b2","sha1":"0038dc97c79451578b7bd48af60ba62282b4082b","sha256":"876d023d9d10c97941b80c3b03e2a5b94631ff7a4af9cee5604a6a2d39718d84","sha512":"2fb31670aec534f73036a9cb759abcea54c760b750a996b3e58700804fb97271a6970f094f4dd0076fa8c4bd74d14781e9197364b531086492e3ffbe98d65dc7","ssdeep":"768:FEC319PiyLNq4/xMoAUHJ2kEBR/MMQyYJrXjBrth5Qzl:FEkPxLE4/6mHQpBCfdj9tMB","tlshash":"b643fcb8e54c01c9a731c44bff82b2bc61b6f73de5914d95f00e691c2ad26a811c5fba","first_seen":"2023-04-05T14:02:03Z","last_seen":"2026-07-24T05:36:57.888741Z","times_seen":10147,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"portal.aplicativogov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/serproid_logo.png","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portal.aplicativogov.com/recuperar/","date":"2026-01-27T12:00:19.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aplicativogov.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 21:20:02 GMT","end":"Sat, 04 Apr 2026 22:17:44 GMT"},"fingerprint":{"sha1":"B1:28:50:A6:DA:0D:26:35:31:16:3C:BC:2C:4E:8F:1A:FF:C6:6D:DD","sha256":"16:D8:34:40:58:0E:47:F2:04:72:E3:2F:A6:15:92:81:DB:8F:B8:AB:96:24:1F:FF:52:D0:9D:DA:97:2C:CD:D7"}}},"request":{"raw":"GET /recuperar/gov.br%20-%20Acesse%20sua%20conta_files/serproid_logo.png HTTP/1.1\r\nHost: portal.aplicativogov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal.aplicativogov.com/recuperar/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:00:19 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 02:46:18 GMT\r\netag: \"8c4-63d3bad2c7280\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 2244\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 3956\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eMQhi%2B4Z2UPy2CNNMIljh3T4MXBhVGHm5o%2FgQ42VtW%2FNax%2F%2FuFc%2Bod4PvEFNbGkB%2BGm1hd5PWHOvXizo3%2FTsN7PqFeTYHT7NivlqW0HO6vCmgsGHwcbVoQ%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9c4816cbdbfab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2244,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"566d3978b62cd3095ab23308161f8624","sha1":"75622a7ea52b6b3b2c0416f45a36f08361700306","sha256":"17e5a76c37035d472c4f142d8f45d5d63ea1f5836da0cafef757202e28135148","sha512":"c7da44473ea93510e3b9548c5c1d3382c9eeea4e09d5553866b2459546778362b02a8f45dc275970f870cdc6aa282706d847c3735f12abdd7bc0bd049677fdf3","ssdeep":"","tlshash":"2e4107074f726200d28e5832bfcf9162c97787c528409b6272bdc9bb0f67016a4af30e","first_seen":"2025-09-29T15:42:26.569537Z","last_seen":"2026-05-29T14:27:54.008439Z","times_seen":8,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"portal.aplicativogov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/syngular_logo.png","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portal.aplicativogov.com/recuperar/","date":"2026-01-27T12:00:19.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aplicativogov.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 21:20:02 GMT","end":"Sat, 04 Apr 2026 22:17:44 GMT"},"fingerprint":{"sha1":"B1:28:50:A6:DA:0D:26:35:31:16:3C:BC:2C:4E:8F:1A:FF:C6:6D:DD","sha256":"16:D8:34:40:58:0E:47:F2:04:72:E3:2F:A6:15:92:81:DB:8F:B8:AB:96:24:1F:FF:52:D0:9D:DA:97:2C:CD:D7"}}},"request":{"raw":"GET /recuperar/gov.br%20-%20Acesse%20sua%20conta_files/syngular_logo.png HTTP/1.1\r\nHost: portal.aplicativogov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal.aplicativogov.com/recuperar/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:00:19 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 02:46:19 GMT\r\netag: \"cff-63d3bad3bb4c0\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 3327\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 3956\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AFY3N9NtA9TP2MH%2BTxshAUtavWWwB8pu0qN7RnplSn5ilRzbs9Z1WSPIdIYAJqS399q%2F1LGo7zM0gm5hWjS5t8uMYT062ujpmNMRwC5%2B3eGmNYbDHGUc0g%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9c4816cbec00b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3327,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGB, non-interlaced","md5":"61b1a4c4479276c236ea9e2f01f4051f","sha1":"ab9f2570c7f5ff1a8128f036f411abcb0fa83949","sha256":"6579936c69cadf578776ba9995a533bfffde67bcbf13383e719e31c51fd02f7c","sha512":"ac8e808d4993bace785fb415ff50b1c2dc3632e54db34644e51cbf41626a5d9e026611d25290f83c45625a619f3f150486d4e524655e21c24f7a2d39df704d1a","ssdeep":"","tlshash":"50615699ed6130a2d7be95329ad8004554768503b7f46d06724ed4eb6f14381ac483cd","first_seen":"2025-09-29T15:42:26.521113Z","last_seen":"2026-05-29T14:27:54.031706Z","times_seen":8,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"portal.aplicativogov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/rawline-600.woff","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://portal.aplicativogov.com/recuperar/","date":"2026-01-27T12:00:20.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aplicativogov.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 21:20:02 GMT","end":"Sat, 04 Apr 2026 22:17:44 GMT"},"fingerprint":{"sha1":"B1:28:50:A6:DA:0D:26:35:31:16:3C:BC:2C:4E:8F:1A:FF:C6:6D:DD","sha256":"16:D8:34:40:58:0E:47:F2:04:72:E3:2F:A6:15:92:81:DB:8F:B8:AB:96:24:1F:FF:52:D0:9D:DA:97:2C:CD:D7"}}},"request":{"raw":"GET /recuperar/gov.br%20-%20Acesse%20sua%20conta_files/rawline-600.woff HTTP/1.1\r\nHost: portal.aplicativogov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/rawline.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Tue, 27 Jan 2026 12:00:21 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=iso-8859-1\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4T1hi0tKq8I6H1gCuSFtlTheHoiomzk3ouMG%2Fut8HfV7mOPEljIQjWMPoHK916y5DBTPtqb6PiyG%2BR8tf%2FpfTWAjI3PxlTCn3MH09bejqgVc5UN8urE9YQ%3D%3D\"}]}\r\ncf-ray: 9c4816d13cd4b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":311,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"957b6ddace47099197de6f55ca736b12","sha1":"51671f9bd5be9f7215932f63ba6ecca4f44e14c5","sha256":"f0808d12e9ba39d1e316ffa87891468d7691d4740cc6a4137fa8db1bb60cdd3a","sha512":"6e624c670ee09236be5920f2bef3aac70a44122d898af15e4c86da3c37028aaa68211e287695a24ae4dafa052d979688ad3ff6cdc0696639a5a486f1ff5059e0","ssdeep":"","tlshash":"9fe0e75d484333cf5811129039c251d1234813fe747dc7ec2cc6d087526853ecdc618c","first_seen":"2025-11-10T04:05:47.292071Z","last_seen":"2026-01-27T12:00:44.461459Z","times_seen":3,"resource_available":false,"data":null}},"time_used":403,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":403,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"portal.aplicativogov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/santander_logo.png","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portal.aplicativogov.com/recuperar/","date":"2026-01-27T12:00:19.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aplicativogov.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 21:20:02 GMT","end":"Sat, 04 Apr 2026 22:17:44 GMT"},"fingerprint":{"sha1":"B1:28:50:A6:DA:0D:26:35:31:16:3C:BC:2C:4E:8F:1A:FF:C6:6D:DD","sha256":"16:D8:34:40:58:0E:47:F2:04:72:E3:2F:A6:15:92:81:DB:8F:B8:AB:96:24:1F:FF:52:D0:9D:DA:97:2C:CD:D7"}}},"request":{"raw":"GET /recuperar/gov.br%20-%20Acesse%20sua%20conta_files/santander_logo.png HTTP/1.1\r\nHost: portal.aplicativogov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal.aplicativogov.com/recuperar/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:00:19 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 02:46:16 GMT\r\netag: \"27a-63d3bad0dee00\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 634\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 3956\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PQ%2FpBXYkzGqvOcoGDaql62CpKdP7jDJILEn0OtijiyfHpsNOch2bLmu3uaBVGdjlFABhTUxUd%2BUXjmQY2XuGdUC0nWkzuCiRH0ZtPzzQ5e4PG%2FvplUd%2BQQ%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9c4816cb4be4b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":634,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"687d871d0c80bfcc9a0703ea7de09979","sha1":"51403b8e7e05f50a23f919ea55fa805b00a3aba1","sha256":"96158d3ef108ecdfc0f23a94e939ae1e9ca77d5a2a5df63ba1544560247001e5","sha512":"33379e5c9312b52c6343d05921edbfc34250e4b47c2a0aed357a0c268fe615fe44641c3041663a306e1d6c3b18a687012c9367e5fc9e7d3a7cd1ee8e1928ac3d","ssdeep":"","tlshash":"b1f062c209a042e74b9a1661282012f3d22ecfb66416d60d844be4e94bba96771c271b","first_seen":"2025-09-29T15:42:26.69335Z","last_seen":"2026-05-29T14:27:54.059448Z","times_seen":9,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"portal.aplicativogov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/picpay.png","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portal.aplicativogov.com/recuperar/","date":"2026-01-27T12:00:19.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aplicativogov.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 21:20:02 GMT","end":"Sat, 04 Apr 2026 22:17:44 GMT"},"fingerprint":{"sha1":"B1:28:50:A6:DA:0D:26:35:31:16:3C:BC:2C:4E:8F:1A:FF:C6:6D:DD","sha256":"16:D8:34:40:58:0E:47:F2:04:72:E3:2F:A6:15:92:81:DB:8F:B8:AB:96:24:1F:FF:52:D0:9D:DA:97:2C:CD:D7"}}},"request":{"raw":"GET /recuperar/gov.br%20-%20Acesse%20sua%20conta_files/picpay.png HTTP/1.1\r\nHost: portal.aplicativogov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal.aplicativogov.com/recuperar/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:00:19 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 02:46:16 GMT\r\netag: \"4fa-63d3bad0dee00\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 1274\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 3957\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jqkXWEuxYvFvGb53b2Wnxy0ZREadPISDEK7bMW9FBFVFfyIVL5IlETdh658ndd2qqjPQ4%2FRt%2FdfbOgRTWAyRfl6t55qvQTcy2fz2WdUZqLnqqgMRBfsr2A%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9c4816cbcbebb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1274,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"e463a676cd665357c0c9a7b573e9f1ad","sha1":"1ebd482d7a9d2f467a57b328898bbffa8f8ed4a5","sha256":"f3a62816b4063419907990f2bee9fd14a38df22e55525d49bf53a892e719dc9c","sha512":"602ae02118c49e586e9ecb51cbdbfdc96c435317c4debf4eb3baadb78738fdb38c1c6ac2ff0b128d1348b60d7af14a03f1377613a5868c6813708163f1a72892","ssdeep":"","tlshash":"c321b49b8bc10976c84d223299f76e82d97fc2c04692d60774cdcd276f000cb09ab084","first_seen":"2025-09-29T15:42:26.489861Z","last_seen":"2026-05-29T14:27:54.067549Z","times_seen":9,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"portal.aplicativogov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/remoteid_logo.png","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portal.aplicativogov.com/recuperar/","date":"2026-01-27T12:00:19.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aplicativogov.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 21:20:02 GMT","end":"Sat, 04 Apr 2026 22:17:44 GMT"},"fingerprint":{"sha1":"B1:28:50:A6:DA:0D:26:35:31:16:3C:BC:2C:4E:8F:1A:FF:C6:6D:DD","sha256":"16:D8:34:40:58:0E:47:F2:04:72:E3:2F:A6:15:92:81:DB:8F:B8:AB:96:24:1F:FF:52:D0:9D:DA:97:2C:CD:D7"}}},"request":{"raw":"GET /recuperar/gov.br%20-%20Acesse%20sua%20conta_files/remoteid_logo.png HTTP/1.1\r\nHost: portal.aplicativogov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal.aplicativogov.com/recuperar/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:00:19 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 02:46:18 GMT\r\netag: \"1c4-63d3bad2c7280\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 452\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 3956\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NDMtq%2F3wST%2Foit6bG00kaA4gkSDPvf04L%2F7Ka0wyw8%2F1ulMxgI5Xb6qP4ZvfqQW70xRgMU4YGXSw2MOuigVBTT8t%2FuP61NbmPUv4LIpk9MtLq6R3WgEH%2Bg%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9c4816cbebfdb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":452,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"a41d21771ab8837d77c70bf9d24f29c6","sha1":"1f3d4734f0519f435420b176397bbae780cf38c5","sha256":"9cbfc3d377f8444fa72662c18e7198c8487a54e41443eee74df721b59a613c63","sha512":"b1e413a4f3bb401a3115cfd58c5f6896a68cd4fefec3f01b0ec7d814ae18a41c8c2c68fe46dbd77c5eb8e2da84e152392116647bf7c13850eaef8942dcc62f37","ssdeep":"","tlshash":"7df023cd3b44cc75ba0e1b33211671f3987f163f98513284ad51392443ad4490860b9f","first_seen":"2025-09-29T15:42:26.529102Z","last_seen":"2026-03-26T06:42:55.051806Z","times_seen":7,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"portal.aplicativogov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/rawline-400.woff","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://portal.aplicativogov.com/recuperar/","date":"2026-01-27T12:00:20.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aplicativogov.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 21:20:02 GMT","end":"Sat, 04 Apr 2026 22:17:44 GMT"},"fingerprint":{"sha1":"B1:28:50:A6:DA:0D:26:35:31:16:3C:BC:2C:4E:8F:1A:FF:C6:6D:DD","sha256":"16:D8:34:40:58:0E:47:F2:04:72:E3:2F:A6:15:92:81:DB:8F:B8:AB:96:24:1F:FF:52:D0:9D:DA:97:2C:CD:D7"}}},"request":{"raw":"GET /recuperar/gov.br%20-%20Acesse%20sua%20conta_files/rawline-400.woff HTTP/1.1\r\nHost: portal.aplicativogov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/rawline.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Tue, 27 Jan 2026 12:00:21 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=iso-8859-1\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=00zZaoajvPHLLTCanfdJix8BAEd4gNefov2k%2Bqxl7qrzKyDiUH%2BFfop0GvYP8bXg6LjhRtyD7gGSOfk8%2BbFdJcSxPhUVZbCot%2B%2Fuktr0GiqW1wkxDM%2FUYg%3D%3D\"}]}\r\ncf-ray: 9c4816d0fccfb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":311,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"957b6ddace47099197de6f55ca736b12","sha1":"51671f9bd5be9f7215932f63ba6ecca4f44e14c5","sha256":"f0808d12e9ba39d1e316ffa87891468d7691d4740cc6a4137fa8db1bb60cdd3a","sha512":"6e624c670ee09236be5920f2bef3aac70a44122d898af15e4c86da3c37028aaa68211e287695a24ae4dafa052d979688ad3ff6cdc0696639a5a486f1ff5059e0","ssdeep":"","tlshash":"9fe0e75d484333cf5811129039c251d1234813fe747dc7ec2cc6d087526853ecdc618c","first_seen":"2025-11-10T04:05:47.292071Z","last_seen":"2026-01-27T12:00:44.461459Z","times_seen":3,"resource_available":false,"data":null}},"time_used":473,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":473,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"portal.aplicativogov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/rawline-500.woff","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://portal.aplicativogov.com/recuperar/","date":"2026-01-27T12:00:20.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aplicativogov.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 21:20:02 GMT","end":"Sat, 04 Apr 2026 22:17:44 GMT"},"fingerprint":{"sha1":"B1:28:50:A6:DA:0D:26:35:31:16:3C:BC:2C:4E:8F:1A:FF:C6:6D:DD","sha256":"16:D8:34:40:58:0E:47:F2:04:72:E3:2F:A6:15:92:81:DB:8F:B8:AB:96:24:1F:FF:52:D0:9D:DA:97:2C:CD:D7"}}},"request":{"raw":"GET /recuperar/gov.br%20-%20Acesse%20sua%20conta_files/rawline-500.woff HTTP/1.1\r\nHost: portal.aplicativogov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/rawline.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Tue, 27 Jan 2026 12:00:21 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=iso-8859-1\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FdFJFrBp2HQtuhkNs3kvriT0FQj8qY4yOX4k03IK9qUBZRv8LgaNymAB%2FXuvAcRyKPEMSYYtF3s3Y1ArIh7UikAxImy%2FYtHiIgcFVnfd4gNxcIuP4yDesw%3D%3D\"}]}\r\ncf-ray: 9c4816d16cd8b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":311,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"957b6ddace47099197de6f55ca736b12","sha1":"51671f9bd5be9f7215932f63ba6ecca4f44e14c5","sha256":"f0808d12e9ba39d1e316ffa87891468d7691d4740cc6a4137fa8db1bb60cdd3a","sha512":"6e624c670ee09236be5920f2bef3aac70a44122d898af15e4c86da3c37028aaa68211e287695a24ae4dafa052d979688ad3ff6cdc0696639a5a486f1ff5059e0","ssdeep":"","tlshash":"9fe0e75d484333cf5811129039c251d1234813fe747dc7ec2cc6d087526853ecdc618c","first_seen":"2025-11-10T04:05:47.292071Z","last_seen":"2026-01-27T12:00:44.461459Z","times_seen":3,"resource_available":false,"data":null}},"time_used":381,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":381,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"portal.aplicativogov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/govbr-modal.css","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://portal.aplicativogov.com/recuperar/","date":"2026-01-27T12:00:19.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aplicativogov.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 21:20:02 GMT","end":"Sat, 04 Apr 2026 22:17:44 GMT"},"fingerprint":{"sha1":"B1:28:50:A6:DA:0D:26:35:31:16:3C:BC:2C:4E:8F:1A:FF:C6:6D:DD","sha256":"16:D8:34:40:58:0E:47:F2:04:72:E3:2F:A6:15:92:81:DB:8F:B8:AB:96:24:1F:FF:52:D0:9D:DA:97:2C:CD:D7"}}},"request":{"raw":"GET /recuperar/gov.br%20-%20Acesse%20sua%20conta_files/govbr-modal.css HTTP/1.1\r\nHost: portal.aplicativogov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal.aplicativogov.com/recuperar/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:00:19 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 02:46:15 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rsi4fEuNcXFFXFbKkFe1X2ByJFfAKb43dPGKisYsoTxFlhCg4W03r%2BS13Ks%2FTUAT2cDuZtY7pIkjeRjqFBUeLxT5jO1lTbWuA1jaUwPmA3PXYfAsBK6rQw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/css\r\nage: 3957\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"c1e-63d3bacfeabc0\"\r\ncf-ray: 9c4816cb2bd7b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3102,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"7040483d109561379c955bb0f8c7d618","sha1":"0b77cb5c158000ffd23070f707df5a5603f5176a","sha256":"70811def81cc8803a3cb4ab25906cf44bffdff033bfda916448b66e3f4653489","sha512":"46aeff5f7474d7854a3333b46f8d506683704f6e2bcd857033fa59fd6e2e997c003666a90c29915d10a4bb70642cf12a50a24b5d6f283ec45637c3cfdde7dfd5","ssdeep":"","tlshash":"3051cd651d15104146fe8e363bfb5e3af25981738e8300ddbab9129c4ff2a6452e0f88","first_seen":"2025-09-29T15:42:26.527588Z","last_seen":"2026-03-26T06:42:55.034711Z","times_seen":7,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"portal.aplicativogov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/modal.js.download","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://portal.aplicativogov.com/recuperar/","date":"2026-01-27T12:00:19.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aplicativogov.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 21:20:02 GMT","end":"Sat, 04 Apr 2026 22:17:44 GMT"},"fingerprint":{"sha1":"B1:28:50:A6:DA:0D:26:35:31:16:3C:BC:2C:4E:8F:1A:FF:C6:6D:DD","sha256":"16:D8:34:40:58:0E:47:F2:04:72:E3:2F:A6:15:92:81:DB:8F:B8:AB:96:24:1F:FF:52:D0:9D:DA:97:2C:CD:D7"}}},"request":{"raw":"GET /recuperar/gov.br%20-%20Acesse%20sua%20conta_files/modal.js.download HTTP/1.1\r\nHost: portal.aplicativogov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal.aplicativogov.com/recuperar/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:00:20 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 02:46:15 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AOWm0qEsZlaeR36G3g5IL0dTw5wauPOTDG%2F6bWLhWo9TwEmErUVmYIeDvNmWROM2NeuQQ4u2ItrnBfSdhsCJ99sR%2Bbl4M0uFXO9kOaxU3%2Fp2UraHxZWZ1Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\netag: W/\"11e-63d3bacfeabc0\"\r\ncontent-encoding: br\r\ncontent-type: text/javascript\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9c4816cb2bdab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":286,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"9350baa1906e1979585e35a8910d25c3","sha1":"126b7f6bb90891cceceaadd30f1a4cf1e5475540","sha256":"f75a29476ebdcdf3c97670e4c379ed46330b9efcaca46e7aea3ed24d47e8bf38","sha512":"87a8ab2a831c13df4dac3a0720de58d354aab8a8f34fedb71b13d8795c7efe6919c37f35fe6ea515216f613e95fe14bed715e72e9b7bffd1e152f4efbe6e1e71","ssdeep":"","tlshash":"fad0cd485c2c307ca1ef0b73a5dd1d9d789008569d05cb11b0f4e8c20e314501d05cc4","first_seen":"2025-09-29T15:42:26.62468Z","last_seen":"2026-03-26T06:42:55.071978Z","times_seen":7,"resource_available":true,"data":null}},"time_used":422,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":422,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"portal.aplicativogov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/jquery.maskedinput.js.download","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://portal.aplicativogov.com/recuperar/","date":"2026-01-27T12:00:19.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aplicativogov.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 21:20:02 GMT","end":"Sat, 04 Apr 2026 22:17:44 GMT"},"fingerprint":{"sha1":"B1:28:50:A6:DA:0D:26:35:31:16:3C:BC:2C:4E:8F:1A:FF:C6:6D:DD","sha256":"16:D8:34:40:58:0E:47:F2:04:72:E3:2F:A6:15:92:81:DB:8F:B8:AB:96:24:1F:FF:52:D0:9D:DA:97:2C:CD:D7"}}},"request":{"raw":"GET /recuperar/gov.br%20-%20Acesse%20sua%20conta_files/jquery.maskedinput.js.download HTTP/1.1\r\nHost: portal.aplicativogov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal.aplicativogov.com/recuperar/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:00:20 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 02:46:20 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=whOhX0i4KzHTDEdYHfiDosVcFBORsqdWNfbcc7p2hfubUAB6bn8gDMf4lAfYaiBgA5OVfV4QB1D7wDHVUh%2BDW%2F6WxjinUKv0Scjp61sQ8x3CerCQl%2FV0xA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\netag: W/\"4114-63d3bad4af700\"\r\ncontent-encoding: br\r\ncontent-type: text/javascript\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9c4816cbfc0ab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16660,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"bf196f5a88226893ea3b4ccc20c8e2c8","sha1":"6e11d2552f042f8046911c67d5aa210c0fc81759","sha256":"08e599ec2c867350e8c19bf77abcfeae04d55a7dea3433708882e9f684f26d64","sha512":"c056533d39c59d4bff67976b3c933b0a09a20df1e89e3c98fc56ae5da7beebe770e603a81d0f1dd2525df86f69270ea2570dc9d3dc8715bf99759f699573c32b","ssdeep":"192:/4yUk20Q6qh6JvXiCcBWi+yi1WGyioW8BQvoQL+ztJcXCy0diFbQC+niyiISOcIN:Q55ZTDdKvorq4Sg","tlshash":"8b722a0e7cf720625663b0be5bdf800962328127148dee047d1c63805fa59b85bfafe9","first_seen":"2023-03-10T12:04:25Z","last_seen":"2026-05-29T14:27:54.042692Z","times_seen":11,"resource_available":true,"data":null}},"time_used":524,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":403,"receive":121,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"portal.aplicativogov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/rawline-700.woff2","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://portal.aplicativogov.com/recuperar/","date":"2026-01-27T12:00:20.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aplicativogov.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 21:20:02 GMT","end":"Sat, 04 Apr 2026 22:17:44 GMT"},"fingerprint":{"sha1":"B1:28:50:A6:DA:0D:26:35:31:16:3C:BC:2C:4E:8F:1A:FF:C6:6D:DD","sha256":"16:D8:34:40:58:0E:47:F2:04:72:E3:2F:A6:15:92:81:DB:8F:B8:AB:96:24:1F:FF:52:D0:9D:DA:97:2C:CD:D7"}}},"request":{"raw":"GET /recuperar/gov.br%20-%20Acesse%20sua%20conta_files/rawline-700.woff2 HTTP/1.1\r\nHost: portal.aplicativogov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/rawline.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Tue, 27 Jan 2026 12:00:20 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=iso-8859-1\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LTedip3vocfaBNNfVO40ebio8yh7HxYL4%2FnzTYq%2BxvhSYbrCAKqIJAd6xR8hivHGBVSjn5tHkt8Az9F8LOWQymSHB0GQBsGm3UpCX%2BKa0x5%2F5Z3F0ZmEog%3D%3D\"}]}\r\ncf-ray: 9c4816cecc84b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":311,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"957b6ddace47099197de6f55ca736b12","sha1":"51671f9bd5be9f7215932f63ba6ecca4f44e14c5","sha256":"f0808d12e9ba39d1e316ffa87891468d7691d4740cc6a4137fa8db1bb60cdd3a","sha512":"6e624c670ee09236be5920f2bef3aac70a44122d898af15e4c86da3c37028aaa68211e287695a24ae4dafa052d979688ad3ff6cdc0696639a5a486f1ff5059e0","ssdeep":"","tlshash":"9fe0e75d484333cf5811129039c251d1234813fe747dc7ec2cc6d087526853ecdc618c","first_seen":"2025-11-10T04:05:47.292071Z","last_seen":"2026-01-27T12:00:44.461459Z","times_seen":3,"resource_available":false,"data":null}},"time_used":367,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":367,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"portal.aplicativogov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-27T12:00:19.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aplicativogov.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 21:20:02 GMT","end":"Sat, 04 Apr 2026 22:17:44 GMT"},"fingerprint":{"sha1":"B1:28:50:A6:DA:0D:26:35:31:16:3C:BC:2C:4E:8F:1A:FF:C6:6D:DD","sha256":"16:D8:34:40:58:0E:47:F2:04:72:E3:2F:A6:15:92:81:DB:8F:B8:AB:96:24:1F:FF:52:D0:9D:DA:97:2C:CD:D7"}}},"request":{"raw":"GET /recuperar/ HTTP/1.1\r\nHost: portal.aplicativogov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://w1w.portalrenovacao.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 12:00:19 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Fri, 07 Nov 2025 02:05:49 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sIfXZ0mAYDY%2BcTHmFhn8455E%2BznfURQBe7tGh%2FR2wTAq%2BwNzr5ZZEojG%2BEBF%2F%2FbAkkkboy5qV8WbUoadvph4oM26Hzof4jsk%2BqZ2Jt8sLa5MrHZOxJPtXw%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9c4816c7f8eca0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:2.2.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34025,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1356)","md5":"10e642857e03260b2caf3b228161ca4e","sha1":"2136577116f2b0a8624672e63dbe316b42394783","sha256":"cafb9bfca8cf4a6c4fb54047b2162d21649d8a5d3b1d3aed6014d63af4fa6446","sha512":"53c289ff0eb331d25c24ab3fc458f693b384b65c2d90b6d33da9bb37f3f71baf68efcc684ae98d28fbc30fac086ed3fb64c0f456c4af41977a81321817386fb8","ssdeep":"384:97hJCJEfILTtdRILoTAbMARqA/iAqsAQUA3eAPCAzOA6YAlmATLGAj7ADsAMZAfI:DJDQLRDvlJ6xLaE0gPHn9A5","tlshash":"62e2a6e60aed0c13036313526226258d702f5d72fd42cd987dffda925fcae85c4ab266","first_seen":"2025-11-10T04:05:47.311215Z","last_seen":"2026-01-27T12:00:44.487999Z","times_seen":3,"resource_available":false,"data":null}},"time_used":546,"timings":{"blocked":73,"dns":58,"connect":1,"send":0,"wait":395,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"portal.aplicativogov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/api.js.download","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://portal.aplicativogov.com/recuperar/","date":"2026-01-27T12:00:19.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aplicativogov.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 21:20:02 GMT","end":"Sat, 04 Apr 2026 22:17:44 GMT"},"fingerprint":{"sha1":"B1:28:50:A6:DA:0D:26:35:31:16:3C:BC:2C:4E:8F:1A:FF:C6:6D:DD","sha256":"16:D8:34:40:58:0E:47:F2:04:72:E3:2F:A6:15:92:81:DB:8F:B8:AB:96:24:1F:FF:52:D0:9D:DA:97:2C:CD:D7"}}},"request":{"raw":"GET /recuperar/gov.br%20-%20Acesse%20sua%20conta_files/api.js.download HTTP/1.1\r\nHost: portal.aplicativogov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal.aplicativogov.com/recuperar/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:00:19 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 02:46:19 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dQkzXOwu0142u4NY3XJAkGTEJPvCpxKayrRicq1l%2FBMgBNzoLtTl2264PKeCDQ8Zwu8OwPKjUa9HY3mcAfkhjCbn1bk3gizJmGUGDzEj3nzm2OE7AwF2Ng%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\netag: W/\"359dd-63d3bad3bb4c0\"\r\ncontent-encoding: br\r\ncontent-type: text/javascript\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9c4816cbec02b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":219613,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (41132)","md5":"22998a06e0a18b69b240b8a90e781c7f","sha1":"f69353a2ea8431f7e95c2562bff37a960aaf9c33","sha256":"2d70875557ec2cd30d5dd986b695b517b54e0a0e33e42f8a7c7c2cd593e08b40","sha512":"bbdda224f4cfa92914dff05401eec30729b1df505b7365c336797e4e080dfa123eebfe4f04e0281f1f9d1ef395d048802106f666e4b8b2abf076bf1522883f2c","ssdeep":"3072:IwoMM9w2PPDiA2VufqpqRCWtNfN6obZbrxVd54dB2VNyYuiicLvyRUvhZMzkz5re:Iwobw6DiA2VufqpstNF6obZbrxxAtKrq","tlshash":"b924d77b6744613a12f912d000af310fa3f6c9166449546cff26bceebc6e987517ab38","first_seen":"2025-08-25T20:16:47.693632Z","last_seen":"2026-01-27T12:00:44.488507Z","times_seen":9,"resource_available":true,"data":null}},"time_used":385,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":257,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-01-27","alert":"Hunting_JS_WebAssembly","trigger":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/api.js.download","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"portal.aplicativogov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/rawline-700.woff","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://portal.aplicativogov.com/recuperar/","date":"2026-01-27T12:00:20.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aplicativogov.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 21:20:02 GMT","end":"Sat, 04 Apr 2026 22:17:44 GMT"},"fingerprint":{"sha1":"B1:28:50:A6:DA:0D:26:35:31:16:3C:BC:2C:4E:8F:1A:FF:C6:6D:DD","sha256":"16:D8:34:40:58:0E:47:F2:04:72:E3:2F:A6:15:92:81:DB:8F:B8:AB:96:24:1F:FF:52:D0:9D:DA:97:2C:CD:D7"}}},"request":{"raw":"GET /recuperar/gov.br%20-%20Acesse%20sua%20conta_files/rawline-700.woff HTTP/1.1\r\nHost: portal.aplicativogov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/rawline.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Tue, 27 Jan 2026 12:00:21 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=iso-8859-1\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tSExJIc0KG3N51Z24qwb9AQ3TXFk90XT%2BIAMmco%2BnltMTFwq1pfTQFzkWaxNB7UdZf1reSFO8T0bbHkTm09x%2FlxtNTIb6L5OajNc1KCE8vblgWm4VkUIAQ%3D%3D\"}]}\r\ncf-ray: 9c4816d11cd1b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":311,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"957b6ddace47099197de6f55ca736b12","sha1":"51671f9bd5be9f7215932f63ba6ecca4f44e14c5","sha256":"f0808d12e9ba39d1e316ffa87891468d7691d4740cc6a4137fa8db1bb60cdd3a","sha512":"6e624c670ee09236be5920f2bef3aac70a44122d898af15e4c86da3c37028aaa68211e287695a24ae4dafa052d979688ad3ff6cdc0696639a5a486f1ff5059e0","ssdeep":"","tlshash":"9fe0e75d484333cf5811129039c251d1234813fe747dc7ec2cc6d087526853ecdc618c","first_seen":"2025-11-10T04:05:47.292071Z","last_seen":"2026-01-27T12:00:44.461459Z","times_seen":3,"resource_available":false,"data":null}},"time_used":438,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":438,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"portal.aplicativogov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portal.aplicativogov.com/recuperar/gov.br%20-%20Acesse%20sua%20conta_files/sicoob_logo.png","fqdn":"portal.aplicativogov.com","domain":"aplicativogov.com","tld":"com"},"ip":{"addr":"104.21.40.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portal.aplicativogov.com/recuperar/","date":"2026-01-27T12:00:19.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aplicativogov.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 21:20:02 GMT","end":"Sat, 04 Apr 2026 22:17:44 GMT"},"fingerprint":{"sha1":"B1:28:50:A6:DA:0D:26:35:31:16:3C:BC:2C:4E:8F:1A:FF:C6:6D:DD","sha256":"16:D8:34:40:58:0E:47:F2:04:72:E3:2F:A6:15:92:81:DB:8F:B8:AB:96:24:1F:FF:52:D0:9D:DA:97:2C:CD:D7"}}},"request":{"raw":"GET /recuperar/gov.br%20-%20Acesse%20sua%20conta_files/sicoob_logo.png HTTP/1.1\r\nHost: portal.aplicativogov.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portal.aplicativogov.com/recuperar/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:00:19 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 02:46:16 GMT\r\netag: \"1957-63d3bad0dee00\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 6487\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 3956\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7%2FvY7YVuDkmfnvBq6zVH7O8V2z5Nr6xx9uuZCzp459SJMsw3hkZe5PBSdwSwTVtzNsiqxNbq%2FyT%2FWv0ot7%2F%2BZH1ARCzyy4UORNIUS7ryAX6wSHZqYW1tyQ%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9c4816cbcbedb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6487,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"a61577988f1d1622ce62b787844e2d6f","sha1":"8f9800409f360000ca1a4d422f59a8190bb3c327","sha256":"a4240021a8574ec4fc634ef7f5c71ce633ce9f1041270c6239782b853c5f8232","sha512":"78969a6a15b1770f589ca26577890d735b779434e048d1168672e7230e5e34ea5b0a31b834037a5fb6ae1245411c5b121eb6a0f08217485afae109e2a8f49229","ssdeep":"96:zskF9dcjvSkOJjD1iXmiXwQc/R2LFuwbYxhgjoqr/Ft1htauk+aLPNcowtSAl9o/:okFzp4WPZ2LRbYopr7VDMPNcTS2py","tlshash":"65d1a0d6d3b720b5c5d56d85ba9583c2e8c755fcb0af45f10680d54b8f07cac11356e8","first_seen":"2025-09-29T15:42:26.583082Z","last_seen":"2026-05-29T14:27:54.072888Z","times_seen":9,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"portal.aplicativogov.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}