government public service

cryptocurrency blockchain

technology software

finance banking

government

Portuguese

TS4666e2e5027

TS010cb06c

Session_Gov_Br_Prod

INGRESSCOOKIE

TSd2153684027

TS011ee698

You're looking at domain 'cas.iti.br' on the Brazilian country-code top-level domain (.br); it also runs on subdomain 'cas'. The second-level label 'iti' is 3 characters long split between two vowels and one consonant. It segments into two words: it, i. The median word length lands at 1.5 characters. No strong language cues emerged from the frequency lists.

accountId

_csrf

h-captcha-response

operation

Login com seu banco
							SUA CONTA SERÁ PRATA

token

html/73/dc/73dcdde7-50bf-4f67-8b85-958cc38e1c9c.html.gz

frame-ancestors 'none'; connect-src 'self' www.google-analytics.com newassets.hcaptcha.com hcaptcha.com serprobots.estaleiro.serpro.gov.br maps.googleapis.com; default-src 'self' https vlibras.gov.br dicionario2.vlibras.gov.br cdp.cloud.unity3d.com config.uca.cloud.unity3d.com traducao2.vlibras.gov.br newassets.hcaptcha.com hcaptcha.com www.google.com www.gstatic.com 'unsafe-inline' 'unsafe-eval' data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' ssl.google-analytics.com blob: www.google-analytics.com www.googletagmanager.com newassets.hcaptcha.com hcaptcha.com js.hcaptcha.com www.google.com www.gstatic.com barra.brasil.gov.br vlibras.gov.br serprobots.estaleiro.serpro.gov.br maps.googleapis.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com cdn-dsgovserprodesign.estaleiro.serpro.gov.br newassets.hcaptcha.com hcaptcha.com cdnjs.cloudflare.com vlibras.gov.br barra.brasil.gov.br serprobots.estaleiro.serpro.gov.br; img-src 'self' data: www.google-analytics.com newassets.hcaptcha.com hcaptcha.com www.gstatic.com vlibras.gov.br serprobots.estaleiro.serpro.gov.br maps.googleapis.com; font-src 'self' cdn-dsgovserprodesign.estaleiro.serpro.gov.br newassets.hcaptcha.com hcaptcha.com fonts.googleapis.com fonts.gstatic.com cdnjs.cloudflare.com barra.brasil.gov.br vlibras.gov.br; object-src 'none'; frame-src newassets.hcaptcha.com hcaptcha.com www.google.com serprobots.estaleiro.serpro.gov.br; upgrade-insecure-requests; block-all-mixed-content;

report-uri https://sentry.hcaptcha.com/api/6/security/?sentry_key=30910f52569b4c17b1081ead2dae43b4&sentry_environment=prod&sentry_release=csp1;

Desafio hCaptcha

019bcf7e6520b43083b6b17a6a2407b58ea28317c796d2cefec0bb8c6e12e100

462ac119411a82d85a1cf93af92707f7342e10bcc4660fdd22026601df188a08

b84161c9fbf7520cd14e7019f92120bd87a928a074156e91a992eba9fc9436e8

088073d3807f453693dfa8753817170104197abdba9155a5d77eb8aeb63e9eb5

4f736fd92864be7f2e08ef166c47b3cd74eee9bbc756a8f318faa7d2d787639e

28ce75d953678c4942df47a11707a15e3c756021cf89090e3e6aa7ad6b6971c3

fb4f642e1c0008a5c53c3beaa38c4c32f8b8fae5c5b11676b9819b78dd54f2c2

efcad26419c1257989e551ae58bf2692e9ef872f7883df51c39ddbb2c8c74949

b0dc3cf0b100689cca6efe82da6d48f73f37ea405c47e9105d797a6fe12a523e

a6c9b444484a1e7a0ffb5c6eeb8bdd5e003610eaf1c35a6659cc9655f61a7a37

f75a29476ebdcdf3c97670e4c379ed46330b9efcaca46e7aea3ed24d47e8bf38

222c1b9e5edcafcf708b0d7e9128868a1a9086cd7849067c805cc49ebd9c11cb

e4b410190c1aec5ad657cef6d6f2de596d8653fd828c1e6fa96374f109a2478e

08e599ec2c867350e8c19bf77abcfeae04d55a7dea3433708882e9f684f26d64

b409c14a10b4caad6b54844aa63a5faf748b83eecc2dd0d4fb1d913f8de55365

c541ef06327885a8415bca8df6071e14189b4855336def4f36db54bde8484f36

05c7ede4e49c73fd5b992a7cdb48296f81331fa434b5a3b0b920e7e673298290

2d56bc3f2b5ce21afe509de457b34cecfa12bb636fa8524d0f733f9282b02476

ee66eadc7cdc73b6402c2af7ec9182cb2acb5979e4a2705de2fb3cf16f0ee615

6c3fd2c8df45e3c2cf2c9e943a094ea48df3565647d7c4b2af7d8a3ee49fb77d

be980baf27338cfa426d3cdef6bde5af6c471affa1a0c9faba0f9191d561342a

f12f502da1aabb0a2919d734f9306db8f6a1a58be17bc36226bd55bb37d2916e

d44e21220e6e22cf3c1f6cb8f2e1c3d39906f2e9509acd13ff5b8f5cd60b61e4

d8414b0e7f442b4abcaaf6eff8c619145c53aa95f2dab73c71bfcf4607aa4dfc

ac69ae08be60b6cde526e8377d6ca41a21ec1e83dfc00c75dc6096c01f9220ef

7388ecb988d101b727cb0a97f0795b9fd5e841fa3a4dac90b9d8cb253ce8d4e5

36f6f0b878e744cabfccd51dd23b38e696cde1fea4ecc5cbb4b5e2bf0583edc9

4a9c5ba910efb09fd7a1c51720e028050b6b69fa86ea51f67a6799b8ac3f8662

e5e93778b271d2d048cf9778fc23658b11f0bb7391967a067d076259d5c2bf93

79bc5edd6299c7d1d40db38c6ad09d4503eb584f6dbb54dd027630586e07a6fe

e1ccd1080bec8f564c721e6b60eff70112cf4b673f9efd4759f03418029e2ab9

205f7b0ad702f07f4e50ca4c42d5c3f77256447374a66ff57327727254511a36

f5b2c91c918e59315377767651577b30ef18b0bd612bd35751e97440ae795fa2

2cc64b8ed2f6fcdb4f0f7a8252ab921b8c5ac0b9374d9320ddf8d58c8160ef80

9a618abc694da071d14ef98d2ed2567f04e23dcd1e5cbadb3dd797b58951aa1f

c770011b30f66e708981627448757496c92df09d9fc48342eb78edac7b4a605b

ddcdd20aa7ac655e9747817f55c70986939eb178d69e6a2f9cac90651cdff8ed

8a9b0ae19fef047c0471ca14d50276313c4834d8595fd96585c07e184cd5119c

2c598624c509311ae68f749a796691453b544b85c86f3a9533bf588af0067f83

2edae20d4fefdd29318f737048561dbaf31253738c2cba20d9ba4fe56f365945

2baba3086f8d69909b6d34d91b9032cb528022374700da873fa45951680d165e

fbf45ba8c8b8f05db9b10342512f0689c5fc59f113a151fd4b1886e955e686a7

5f1e9af12334fa4f99f7f87c2d2fbca3ee38ea405643f2a7f2a3fd6567bd257c

26b0068690ab129c811e24d9fcd13e65c5a955d387a2bc239140e9cfdac07693

e9b2078a15856216006eaf3bd10f0e95898d4cff347597f754abcaf5b48797d3

8775dcdae77049ab458625b296769f3c87bc7720e3296d06b28ba13fb46cac51

a7ef4964793d41b6e48508f0e2940c72e359d25e951da081dba670a0f828bb41

d44f6d68f38e68ebc4a1361a579e98c335b268a96535d512acc55a34f74a5261

http://estruturaorganizacional.dados.gov.br/id/unidade-organizacional/2981

width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=0

viewport

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

Gestão do Serviço Internet  SERPRO

MINISTERIO DA FAZENDA

acesso.gov.br

José Rodrigues Gonçalves Júnior

Instituto Nacional de Tecnologia Informação - ITI

Rafael de Lima Ramos

iti.br

Abuse

Admin

Cloudflare-NOC

Cloudflare, Inc.

CLOUDFLARENET


	  							document.getElementById("enter-account-id").addEventListener("click", event=>onSubmit(event));
	  						


											document.getElementById("login-external-authentication-banco-do-brasil").addEventListener("click", event => { 
												setProviderId("banco-do-brasil");
												
												return onSubmit(event);
												
											});
										


											document.getElementById("login-external-authentication-itau").addEventListener("click", event => { 
												setProviderId("itau");
												
												return onSubmit(event);
												
											});
										


											document.getElementById("login-external-authentication-caixa-economica").addEventListener("click", event => { 
												setProviderId("caixa-economica");
												
												return onSubmit(event);
												
											});
										


											document.getElementById("login-external-authentication-bradesco").addEventListener("click", event => { 
												setProviderId("bradesco");
												
												return onSubmit(event);
												
											});
										


											document.getElementById("login-external-authentication-santander").addEventListener("click", event => { 
												setProviderId("santander");
												
												return onSubmit(event);
												
											});
										


											document.getElementById("login-external-authentication-picpay").addEventListener("click", event => { 
												setProviderId("picpay");
												
												return onSubmit(event);
												
											});
										


											document.getElementById("login-external-authentication-nubank").addEventListener("click", event => { 
												setProviderId("nubank");
												
												return onSubmit(event);
												
											});
										


											document.getElementById("login-external-authentication-sicoob").addEventListener("click", event => { 
												setProviderId("sicoob");
												
												return onSubmit(event);
												
											});
										


											document.getElementById("login-external-authentication-sicredi").addEventListener("click", event => { 
												setProviderId("sicredi");
												
												return onSubmit(event);
												
											});
										


											document.getElementById("login-external-authentication-banrisul").addEventListener("click", event => { 
												setProviderId("banrisul");
												
												return onSubmit(event);
												
											});
										


											document.getElementById("login-external-authentication-agibank").addEventListener("click", event => { 
												setProviderId("agibank");
												
												return onSubmit(event);
												
											});
										


											document.getElementById("login-external-authentication-banco-de-brasilia").addEventListener("click", event => { 
												setProviderId("banco-de-brasilia");
												
												return onSubmit(event);
												
											});
										


											document.getElementById("login-external-authentication-mercantil").addEventListener("click", event => { 
												setProviderId("mercantil");
												
												return onSubmit(event);
												
											});
										


											document.getElementById("login-external-authentication-btgpactual").addEventListener("click", event => { 
												setProviderId("btgpactual");
												
												return onSubmit(event);
												
											});
										


											document.getElementById("login-external-authentication-inter").addEventListener("click", event => { 
												setProviderId("inter");
												
												return onSubmit(event);
												
											});
										


											document.getElementById("login-external-authentication-c6bank").addEventListener("click", event => { 
												setProviderId("c6bank");
												
												return onSubmit(event);
												
											});
										


											document.getElementById("login-external-authentication-bancobmg").addEventListener("click", event => { 
												setProviderId("bancobmg");
												
												return onSubmit(event);
												
											});
										


  						document.getElementById("login-certificate").addEventListener("click", event=>onSubmit(event));
  					


										document.getElementById("login-external-authentication-neoid").addEventListener("click", event => { 
											setProviderId("neoid");
											
											return onSubmit(event);
											
										});
									


										document.getElementById("login-external-authentication-safeid").addEventListener("click", event => { 
											setProviderId("safeid");
											
											return onSubmit(event);
											
										});
									


										document.getElementById("login-external-authentication-birdid").addEventListener("click", event => { 
											setProviderId("birdid");
											
											return onSubmit(event);
											
										});
									


										document.getElementById("login-external-authentication-remoteid").addEventListener("click", event => { 
											setProviderId("remoteid");
											
											return onSubmit(event);
											
										});
									


										document.getElementById("login-external-authentication-vidaas").addEventListener("click", event => { 
											setProviderId("vidaas");
											
											return onSubmit(event);
											
										});
									


										document.getElementById("login-external-authentication-dscloud").addEventListener("click", event => { 
											setProviderId("dscloud");
											
											return onSubmit(event);
											
										});
									


										document.getElementById("login-external-authentication-syngular").addEventListener("click", event => { 
											setProviderId("syngular");
											
											return onSubmit(event);
											
										});
									


	focusOnLoad('accountId');
	var CNAME_GOVBRCOORD = "Govbrcoord";
	var cookieValueBase64New = "";

    (function () {
        window.addEventListener("load", function () {
            cpfMask("accountId");
			getLocation();
        });
    })();

	function getLocation() {
		if (navigator.geolocation) {
			navigator.geolocation.getCurrentPosition(showPosition, showError);
		}
	}
	function showError(error) {
		switch(error.code) {
			case error.PERMISSION_DENIED:
			break;
		}
	}
    function showPosition(position) {
		
		cookieValueBase64New = "C" + btoa(precisionWithoutRound(position.coords.latitude, 4) + "_" + precisionWithoutRound(position.coords.longitude, 4));
		
		var cookieValueBefore = getCookie(CNAME_GOVBRCOORD);
		var cookieValueBase64Before = cookieValueBefore ? cookieValueBefore.split('_')[0] : "";
		
		
			if (cookieValueBase64New !== cookieValueBase64Before) {
				setCookie(CNAME_GOVBRCOORD, cookieValueBase64New)
			} else {
				setCookie(CNAME_GOVBRCOORD, cookieValueBefore)
			}
		
    }
	function precisionWithoutRound(num, precision) {
		return num.toFixed(precision + 1).slice(0, -1);
	}
	function setCookie(cname, value) {
		const expireDate = new Date();
		expireDate.setTime(expireDate.getTime() + (3652 * 24 * 60 * 60 * 1000));
		document.cookie = cname + "=" + encodeURIComponent(value) + ";domain=." + window.location.hostname + ";expires=" + expireDate.toUTCString();
	}
	function getCookie(cname) {
		var name = cname + "=";
		var decodedCookie = decodeURIComponent(document.cookie);
		var ca = decodedCookie.split(';');
		for(var i = 0; i <ca.length; i++) {
		var c = ca[i];
		while (c.charAt(0) == ' ') {
			c = c.substring(1);
		}
		if (c.indexOf(name) == 0) {
			return c.substring(name.length, c.length);
		}
		}
		return "";
	}
	function deleteCookie(cname) {
		document.cookie = cname + "=deleted;domain=." + window.location.hostname + ";expires=Thu, 01 Jan 1970 00:00:01 GMT";
	}
	function initMap() {      
		var geocoder  = new google.maps.Geocoder();             // create a geocoder object
		const latlngFromBase64 = atob(cookieValueBase64New.slice(1));
		const latlngStr = latlngFromBase64.split("_", 2);
		const latlng = {
		lat: parseFloat(latlngStr[0]),
		lng: parseFloat(latlngStr[1]),
		};
		var location  = new google.maps.LatLng(latlng.lat, latlng.lng);    // turn coordinates into an object          
		geocoder.geocode({'latLng': location}, function (results, status) {
		if(status == google.maps.GeocoderStatus.OK) {           // if geocode success
			var city = findResult(results, "locality");
			var region = findResult(results, "administrative_area_level_2");
			var state = findResult(results, "administrative_area_level_1");
			var country = findResult(results, "country");

			var address = (city ? city.long_name + " - " : (region ? region.long_name + " - " : "")) + state.short_name +", "+country.long_name;

			setCookie(CNAME_GOVBRCOORD, cookieValueBase64New + "_" + btoa(address))
		}
		});
		function findResult(results, type) {
			var indice = 0;
			for (var j=0; j<results.length; j++){
				if (results[j].types[0]=='locality'){
						indice=j;
						break;
				}
			}
			for (var i=0; i<results[indice].address_components.length; i++){
				if (results[indice].address_components[i].types[0] == type) {
						return results[indice].address_components[i];
					}
			}
			return;
		}
	}

    function accordion(elem) {
        var panel = document.getElementById(elem)
        if (panel.style.maxHeight) {
            panel.style.maxHeight = null;
			document.getElementById("title-outras-op").style = "display: block;";
			document.getElementById("hr-outras-op").style = "display: block;"
        } else {
            panel.style.maxHeight = 0;
			document.getElementById("title-outras-op").style = "display: none;";
			document.getElementById("hr-outras-op").style = "display: none;"
        }
    }

    setTimeout(function () { location.reload(true); }, 29 /* minutes */ * 60 /* seconds */ * 1000 /* millis */);


Requests	IP Address	Location	AS Autonomous System
80	200.198.255.38	Brasília, Federal District, Brazil	AS10954SERVICO FEDERAL DE PROCESSAMENTO DE DADOS - SERPRO
80	1	-	-

Security Scan Report: cas.iti.br

Summary

AI Security Verdict

High Risk

Risk Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History