{"report_id":"b00d53f5-ac51-47f9-b850-9b0a3f46a588","version":6,"status":"done","tags":[],"date":"2026-05-27T00:03:32Z","url":{"schema":"https","addr":"detran-sc-ipva-gov-consulta.com/","fqdn":"detran-sc-ipva-gov-consulta.com","domain":"detran-sc-ipva-gov-consulta.com","tld":"com"},"ip":{"addr":"104.21.15.124","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"detran-sc-ipva-gov-consulta.com/","fqdn":"detran-sc-ipva-gov-consulta.com","domain":"detran-sc-ipva-gov-consulta.com","tld":"com"},"title":"Microsoft Azure Web App - Error 404","dom":{"size":2564,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"b126effb7ee999d941eb50700942ee8a","sha1":"ecfc6a65f6e3ce63789cfa52456fd0ea62f903e9","sha256":"061a404c632e2784b3955384e58d2933d35b8db285c4aff89097570beb331da2","sha512":"54dc26414f4eb802afef81a090bd441f5a0e526843454705af85c070a1e5febee9e0b1cd33eef299f258d1aa03569c2606a75fdff99aea33f3d7c04265336ed6","ssdeep":"","tlshash":"5951436b86b702005a4294591bd767543a25e18b5209cd1c7e9ce36cdfc29e18df63dc","dom_hash":"domhash6a49996323873472aa269981afe357ce","first_seen":"2025-11-06T06:02:40.568708Z","last_seen":"2026-08-19T02:35:25.487367Z","times_seen":155,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"detran-sc-ipva-gov-consulta.com/","fqdn":"detran-sc-ipva-gov-consulta.com","domain":"detran-sc-ipva-gov-consulta.com","tld":"com"},"ip":{"addr":"104.21.15.124","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-01T00:03:32Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"detran-sc-ipva-gov-consulta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"detran-sc-ipva-gov-consulta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"detran-sc-ipva-gov-consulta.com","ip":{"addr":"172.67.162.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-03","domain_rank":0,"first_seen":"2026-05-05T06:39:16.638362Z","last_seen":"2026-05-26T17:03:51.730158Z","alert_count":4,"request_count":2,"received_data":6553,"sent_data":969,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"detran-sc-ipva-gov-consulta.com/","fqdn":"detran-sc-ipva-gov-consulta.com","domain":"detran-sc-ipva-gov-consulta.com","tld":"com"},"ip":{"addr":"172.67.162.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5210f0b0a97a64a9d32fa6eef7348bdf","sha1":"0eebf511bf0f3e12e520af9832825ddb4ecc4830","sha256":"bd495ef4443765ec856091168ff98f4282c45c92c562415c435880ad4482235f","sha512":"63f292f7d28e129c9dc48880cf3c7bcbbfca175147ec380415c5a93ee1e93dae0d2eb8b7bafc2b199980d37644d627a91a9822405cc153c19b675b18061d42dd","ssdeep":"","tlshash":"65d0129b666b0270425ae0250dde0b49343044af050085547d3cc2a58fa9da46769afd","size":251,"data":"","first_seen":"2023-03-08T05:14:39Z","last_seen":"2026-06-05T12:53:16.398577Z","times_seen":199,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"detran-sc-ipva-gov-consulta.com/","fqdn":"detran-sc-ipva-gov-consulta.com","domain":"detran-sc-ipva-gov-consulta.com","tld":"com"},"ip":{"addr":"172.67.162.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-27T00:03:11.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"detran-sc-ipva-gov-consulta.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 23:27:49 GMT","end":"Fri, 31 Jul 2026 23:27:48 GMT"},"fingerprint":{"sha1":"37:51:B2:4B:C3:95:7D:89:C3:2C:61:D9:8F:F9:5C:98:FB:84:44:E6","sha256":"48:17:09:03:64:88:8F:11:44:DC:25:4B:6C:99:02:2A:43:58:3D:5A:B4:E6:E4:D3:39:F0:D8:66:B2:3B:BC:99"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: detran-sc-ipva-gov-consulta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Wed, 27 May 2026 00:03:11 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bqq1cUhoIgCc%2FEwHLM3wzQe3AQBMsOzcQwvSjlx4qZGNnJ8YemCoHpOv%2BZl3Xkt86p%2FGFQoAv6ichwlt6FHjdOCJUFgiqZoH25VZMLck5CHYqHYjjRX7M72Aq1IMev%2BhT6EEeDajPDMquOc5PyDLwss7\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a020c14aab69b515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2667,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"6954b51befaf381d05a1b3228bb208e9","sha1":"e5bbbbc9480c0ee393f15a56b751278fcfea8b39","sha256":"1e0878f232e32cf44e87ba00bd6957c1ebdfc9bc7c1c0a1389f8c62e6ae3311a","sha512":"ea26f3daa2bc7aa7d10dd27203b5a3b5f4bf075a9b4efb8fd270048394652cbedcdf745cc2bbef4eaa9aca96417b2655adb93fa6724da3b6b3dad18873fbc0bf","ssdeep":"","tlshash":"b551452dc2811600527293689f932758ff16919b1302055c7eede36aaff1a548ee7bdc","first_seen":"2023-04-05T22:55:47Z","last_seen":"2026-08-19T02:35:25.489967Z","times_seen":333,"resource_available":true,"data":null}},"time_used":438,"timings":{"blocked":20,"dns":9,"connect":1,"send":0,"wait":392,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"detran-sc-ipva-gov-consulta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"detran-sc-ipva-gov-consulta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"detran-sc-ipva-gov-consulta.com/favicon.ico","fqdn":"detran-sc-ipva-gov-consulta.com","domain":"detran-sc-ipva-gov-consulta.com","tld":"com"},"ip":{"addr":"172.67.162.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://detran-sc-ipva-gov-consulta.com/","date":"2026-05-27T00:03:11.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"detran-sc-ipva-gov-consulta.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 23:27:49 GMT","end":"Fri, 31 Jul 2026 23:27:48 GMT"},"fingerprint":{"sha1":"37:51:B2:4B:C3:95:7D:89:C3:2C:61:D9:8F:F9:5C:98:FB:84:44:E6","sha256":"48:17:09:03:64:88:8F:11:44:DC:25:4B:6C:99:02:2A:43:58:3D:5A:B4:E6:E4:D3:39:F0:D8:66:B2:3B:BC:99"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: detran-sc-ipva-gov-consulta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://detran-sc-ipva-gov-consulta.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncontent-type: text/html\r\ndate: Wed, 27 May 2026 00:03:12 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nserver: cloudflare\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=baesz7w2LaI%2FwRDBkrEreBRXqVo%2B9ACRFYzB%2Frku%2BHLzYC3SkAHOrWXKazF%2BJLufGd6pILt50HeEPMmhq3iFH4%2F4I5MZ6DpiGjE7lkffVlxzqGOU1I9Rj5AJVMcIbe26tj8i%2BFr%2BJKTSO%2FcgfoD5fp7d\"}]}\r\ncf-ray: a020c14e3ba056aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2667,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"6954b51befaf381d05a1b3228bb208e9","sha1":"e5bbbbc9480c0ee393f15a56b751278fcfea8b39","sha256":"1e0878f232e32cf44e87ba00bd6957c1ebdfc9bc7c1c0a1389f8c62e6ae3311a","sha512":"ea26f3daa2bc7aa7d10dd27203b5a3b5f4bf075a9b4efb8fd270048394652cbedcdf745cc2bbef4eaa9aca96417b2655adb93fa6724da3b6b3dad18873fbc0bf","ssdeep":"","tlshash":"b551452dc2811600527293689f932758ff16919b1302055c7eede36aaff1a548ee7bdc","first_seen":"2023-04-05T22:55:47Z","last_seen":"2026-08-19T02:35:25.489967Z","times_seen":333,"resource_available":true,"data":null}},"time_used":795,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":795,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"detran-sc-ipva-gov-consulta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"detran-sc-ipva-gov-consulta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}