Indicator declaragorabrasil.click Type domain Category SEO Poisoning Confidence medium VT Score 0/94 Source urlscan First Seen 2026-06-15 00:00:05 UTC Last Seen 2026-06-16 08:00:04 UTC urlscan View scan result ↗
Raw JSON
{
  "verdicts": {
    "score": 0,
    "malicious": false,
    "urlscan": {
      "malicious": false
    },
    "engines": {
      "score": 99,
      "malicious": true,
      "hasVerdicts": true,
      "tags": [
        "urlscan-ml",
        "urlscan-ml-60c5e22"
      ]
    }
  },
  "submitter": {
    "country": "fi"
  },
  "dom": {
    "size": 34489,
    "hash": "fef2528491599fe3e1c60d80bec74164dc8f5eeba69e72dcd9fda136bc81ed6b"
  },
  "visible": {
    "brandname": "gov.br"
  },
  "frames": {
    "length": 1
  },
  "canonical": {
    "task": {
      "url": "declaragorabrasil.click/gov"
    },
    "page": {
      "url": "declaragorabrasil.click/gov"
    }
  },
  "screenshot": "https://urlscan.io/screenshots/019ec779-4ad3-725e-92c3-1e3578e1943f.png",
  "labels": [
    "domain.apexdomain",
    "visual.brandai"
  ],
  "task": {
    "visibility": "public",
    "method": "api",
    "domain": "declaragorabrasil.click",
    "apexDomain": "declaragorabrasil.click",
    "time": "2026-06-14T18:51:21.746Z",
    "uuid": "019ec779-4ad3-725e-92c3-1e3578e1943f",
    "url": "https://declaragorabrasil.click/gov/",
    "tags": [
      "@phish_report"
    ]
  },
  "stats": {
    "uniqIPs": 6,
    "uniqCountries": 4,
    "dataLength": 4247831,
    "encodedDataLength": 1297378,
    "requests": 22
  },
  "meta": [],
  "scanner": {
    "country": "nl"
  },
  "links": {
    "length": 0
  },
  "page": {
    "country": "NL",
    "server": "nginx",
    "ip": "168.100.8.202",
    "apexDomainAgeDays": 0,
    "language": "pt",
    "mimeType": "text/html",
    "title": "Consulta - Situação Fiscal",
    "url": "https://declaragorabrasil.click/gov/",
    "tlsValidDays": 89,
    "tlsAgeDays": 0,
    "domainAgeDays": 0,
    "tlsValidFrom": "2026-06-14T02:19:18.000Z",
    "domain": "declaragorabrasil.click",
    "apexDomain": "declaragorabrasil.click",
    "asnname": "BLNWX - BL Networks, US",
    "asn": "AS399629",
    "tlsIssuer": "YR2",
    "status": "200"
  },
  "text": {
    "size": 22837,
    "hash": "4b6a947841712e3bc2921f96cc08f2955b15539f35b474d2cfd6b8ff060c28aa"
  },
  "websockets": {
    "totalBytesSent": 0,
    "totalBytesReceived": 0,
    "length": 0
  },
  "usertags": [],
  "_id": "019ec779-4ad3-725e-92c3-1e3578e1943f",
  "_score": null,
  "sort": [
    1781463081746,
    "019ec779-4ad3-725e-92c3-1e3578e1943f"
  ],
  "image": {
    "size": 131602,
    "width": 1600,
    "hash": "0892f676b2cac12ace2e9fd1416b9871e7f15434d1a72fdf5c43fc2b7e85001c",
    "height": 1200,
    "aspectratio": 1.33
  },
  "result": "https://urlscan.io/api/v1/result/019ec779-4ad3-725e-92c3-1e3578e1943f/"
}

Campaign cluster — 8 pivot-discovered domains

Domain VT Score
gnwfinance.com 0/94
www.gnwfinance.com 0/94
financialregistrationoffer.com 0/94
tatrabank-sk.com 0/94
taatrabank-sk.com 0/94
taattrabank-sk.com 0/94
tatrrabank-sk.com 0/94
tattrabank-sk.com 0/94