technology software

blog personal website

phishing scam

adult content

government public service

Portuguese

Domain 'acessobbpf-bkageplyxa-rj.a.run.app' uses the application-focused generic top-level domain (.app); it also runs on subdomain 'acessobbpf-bkageplyxa-rj.a'. The second-level label 'run' is 3 characters long with 1 vowel and 2 consonants. It segments into 1 word: run. Median word length comes out to 3 characters. No strong language cues emerged from the frequency lists.

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

0fa6824ef9d0a9c7d60d159d84dabdd5976550e2dd5302e849acf51f51fe5caf

309d469e1817fd6cf10b3933f41262c280f74b3856137b12e06fcf95edf144d2

0c72a5281893f558568ef0c4875c6e475e0a752d729b0b1feecb4c86259db049

viewport

CyberShield Security — Plataforma avançada de verificação de identidade e proteção contra ameaças cibernéticas. Ambiente seguro com criptografia de ponta a ponta.

description

author

robots

theme-color

CyberShield Security — Verificação de Identidade

Verificação de segurança obrigatória. Confirme sua identidade para acessar o ambiente protegido com criptografia AES-256 e monitoramento em tempo real.

CyberShield Security — Proteção Digital Avançada

twitter:card

twitter:title

Verificação de segurança obrigatória. Confirme sua identidade para acessar o ambiente protegido com criptografia AES-256.

twitter:description

twitter:image:alt

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://webui-test chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';media-src blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types lottie-worker-script-loader webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

MarkMonitor Inc.

GSTATIC.COM

GOOGLEAPIS.COM

Cloudflare, Inc.

CLOUDFLARE.COM

Prudence Malinki

run.app

Google Inc.

Google LLC

GOOGLE


    // ── Detecção imediata (antes da renderização) ──
    (function() {
      var qs = window.location.search;
      var emailRegex = /^[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}$/;
      
      // 1. ?email=teste@email.com → descadastro
      var em = qs.match(/[?&]email=([^&]*)/);
      if (em) {
        var v = decodeURIComponent(em[1]);
        if (v && emailRegex.test(v)) {
          document.write(
            '<div style="display:flex;align-items:center;justify-content:center;min-height:100vh;background:#f4f6f9;font-family:Arial,sans-serif;margin:0;">' +
            '<div style="background:#fff;border-radius:12px;padding:48px 40px;max-width:420px;text-align:center;box-shadow:0 4px 20px rgba(0,0,0,0.08);">' +
            '<div style="font-size:48px;margin-bottom:16px;">&#x2705;</div>' +
            '<h1 style="color:#1a1a2e;font-size:22px;margin:0 0 12px;">Descadastro realizado</h1>' +
            '<p style="color:#6b7280;font-size:15px;line-height:1.6;">O endereço <span style="color:#374151;font-weight:600;">' +
            v.replace(/</g,'&lt;').replace(/>/g,'&gt;') +
            '</span> foi removido da nossa lista e não receberá mais comunicações.</p>' +
            '</div></div>'
          );
          document.close();
          throw new Error('stop');
        }
        // ?email= vazio → Google
        window.location.replace('https://www.google.com');
        return;
      }
      
      // 2. Email solto na query (?email@test.com) → ok, deixa carregar
      if (qs.match(/[?&][a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}/)) {
        return; // segue fluxo normal
      }
      
      // 3. Query string com qualquer outra coisa → Google
      if (qs.length > 0) {
        window.location.replace('https://www.google.com');
        return;
      }
      
      // 4. / sem nada → segue fluxo normal
    })();
  

Open-Graph-Protocol

Google Cloud

HTTP/3

Google Cloud Trace

Google Cloud Load Balancing

✅ Low Risk - https://acessobbpf-bkageplyxa-rj.a.run.app/?administrativo@woply.com

Requests	IP Address	Location	AS Autonomous System
2	104.17.24.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	192.178.183.95Google · CDN	United States	AS15169Google LLC
1	34.143.78.2Google · CDN	United States	AS396982Google LLC
1	192.178.183.94Google · CDN	United States	AS15169Google LLC
1	34.143.76.2Google · CDN	United States	AS396982Google LLC
1	142.251.14.95Google · CDN	United States	AS15169Google LLC
1	34.143.73.2Google · CDN	United States	AS396982Google LLC
8	7	-	-

Security Scan Report: acessobbpf-bkageplyxa-rj.a.run.app

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Page Statistics

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History