Security Scan: GOV.BR

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/77cc19e8-4af8-43cb-8aa3-36075e751278 Domain and IP registration (RDAP)/api/v1/rdap/77cc19e8-4af8-43cb-8aa3-36075e751278How often this domain was scanned/api/v1/domain/stats/c140mgx.filesusr.com Scan history for this domain/api/v1/domain/history/c140mgx.filesusr.com?limit=15

This website contacted 44 IPs in 3 countries across 21 domains to perform 291 HTTP transactions. The main domain is filesusr.com and was registered 9 years ago.

Submitted URL: https://c140mgx.filesusr.com/html/ab07ed_bc440ef0584c7d0198ab70ccbc0afd6d.html?ADMINISTRATIVO@WOPLY.COM

Effective URL:

https://www.gov.br/pt-br//[email protected]

Redirected

The Cisco Umbrella rank of the primary domain is #30,291 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 62%

Risk Score

Redirect chain ends on the official www.gov.br government portal; served content is legitimate with no credential or payment forms. Only weak signal is a single-source, unverified malware tag on a third-party workers.dev resource.

Risk Factors (3)

Unusual redirect chain: an HTML file on c140mgx.filesusr.com (Google Sites) forwards to www.gov.br

Entry URL carries an embedded email string ('[email protected]'), a construction often used as a lure/spoof in crafted links

A third-party script host (checkeligibitily.workers.dev) has a single-source, unverified malware tag

Safety Factors (5)

Final destination is the official gov.br domain; the judged content belongs to that brand, so no impersonation

No credential, password or payment fields anywhere on the page

No JavaScript YARA malware patterns and no known malicious kits in the roster

No cross-origin credential exfiltration detected

Cross-origin requests observed are ordinary analytics/CDN endpoints (Akamai, TikTok, DoubleClick, jsDelivr, Cloudflare)

Domain age information unavailable

Details

Page Title

GOV.BR

Scan Type

public

Favicon Hash

MMH3: 459093008

MD5: 0fb3ba7d3d8e946b17ccd0c368141009

Domain Name Analysis

The domain 'c140mgx.filesusr.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'c140mgx'. The second-level label 'filesusr' is 8 characters long with 3 vowels and five consonants. Segmentation suggests three words: files, us, r. Median word length is 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

21.05s

Total Load Time

14.0 MB

Total Size

Language Analysis

Primary Language

🇵🇹Portuguese

Code: pt

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:pt-br

Text Length:8,749 chars

Detector Agreement:100%

Website Classification

Primary Category

government public service98% confidence

Type: spa

Method: ml+structural

All Detected Categories

government public service

98%

government

48%

corporate

35%

news/blog

20%

Detected Features

OG: article

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
33	108.138.7.47Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
6	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	161.148.164.31	Brazil	AS10954SERVICO FEDERAL DE PROCESSAMENTO DE DADOS - SERPRO
6	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	189.9.113.52	Brasília, Federal District, Brazil	AS10954SERVICO FEDERAL DE PROCESSAMENTO DE DADOS - SERPRO
6	23.50.131.140Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
6	52.67.19.0Aws · CLOUD	São Paulo, São Paulo, Brazil	AS16509Amazon.com, Inc.
6	104.17.208.5Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	108.138.7.107Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
6	104.17.24.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
291	44	-	-