Security Scan: GOV.BR

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/7ea373d4-75d8-4ec7-b88e-180d77fd41c0 Domain and IP registration (RDAP)/api/v1/rdap/7ea373d4-75d8-4ec7-b88e-180d77fd41c0How often this domain was scanned/api/v1/domain/stats/4zeos9epro.filesusr.com Scan history for this domain/api/v1/domain/history/4zeos9epro.filesusr.com?limit=15

This website contacted 43 IPs in 3 countries across 21 domains to perform 292 HTTP transactions. The main domain is filesusr.com and was registered 9 years ago.

Submitted URL: https://4zeos9epro.filesusr.com/html/ab07ed_51a85491fd2562cd97eb4168af496874.html?ADMINISTRATIVO@WOPLY.COM

Effective URL:

https://www.gov.br/pt-br//[email protected]

Redirected

The Cisco Umbrella rank of the primary domain is #30,291 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 72%

Risk Score

Redirect lands on the genuine official gov.br government portal with real content and no credential or payment forms. Only a single-source, unverified malware report on an unrelated workers.dev resource and an odd Google Sites entry URL — no concrete malicious signal on the served page.

Risk Factors (2)

Entry URL was a Google Sites page (4zeos9epro.filesusr.com) carrying an email-like query string ([email protected]) before redirecting to gov.br — an unusual, unexplained referral path worth noting.

Single-source, unverified malware report against a workers.dev third-party resource referenced in the scan; low corroboration and not tied to the page's own domain.

Safety Factors (4)

Final destination is the official www.gov.br domain with authentic government content and no credential or payment collection.

No YARA malware patterns, no JavaScript behavioral signals (no DevTools blocking, no credential exfiltration), no cross-origin form posting.

No kit-roster or native YARA hits; no critical phishing indicators detected.

og:type is 'article' and the page reports on government services rather than impersonating a third-party brand.

Domain age information unavailable

Details

Page Title

GOV.BR

Scan Type

public

Favicon Hash

MMH3: 459093008

MD5: 0fb3ba7d3d8e946b17ccd0c368141009

Domain Name Analysis

The domain '4zeos9epro.filesusr.com' uses the commercial generic top-level domain (.com) and includes subdomain '4zeos9epro'. The registrable portion 'filesusr' spans 8 characters containing three vowels alongside 5 consonants. Tokenizing the label suggests three words: files, us, r. Expect 2 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

21.97s

Total Load Time

14.2 MB

Total Size

Language Analysis

Primary Language

🇵🇹Portuguese

Code: pt

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:pt-br

Text Length:9,460 chars

Detector Agreement:100%

Website Classification

Primary Category

government public service99% confidence

Type: spa

Method: ml+structural

All Detected Categories

government public service

99%

technology software

49%

government

48%

corporate

35%

education learning

32%

Detected Features

OG: article

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
40	108.138.7.101Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
6	188.114.97.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	161.148.164.31	Brazil	AS10954SERVICO FEDERAL DE PROCESSAMENTO DE DADOS - SERPRO
6	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	189.9.113.41	Brasília, Federal District, Brazil	AS10954SERVICO FEDERAL DE PROCESSAMENTO DE DADOS - SERPRO
6	2.21.239.9Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
6	18.230.36.119Aws · CLOUD	São Paulo, São Paulo, Brazil	AS16509Amazon.com, Inc.
6	104.16.180.112Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	108.138.7.13Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
6	188.114.96.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
292	43	-	-