{"id":507,"date":"2026-09-06T21:36:55","date_gmt":"2026-09-06T16:06:55","guid":{"rendered":"https:\/\/www.pethuraj.com\/blog\/?p=507"},"modified":"2026-09-06T21:39:25","modified_gmt":"2026-09-06T16:09:25","slug":"fake-challan-security-investigation","status":"publish","type":"post","link":"https:\/\/www.pethuraj.com\/blog\/fake-challan-security-investigation\/","title":{"rendered":"I Received a Fake Traffic Violation Challan. What I Found Behind It Turned Into a Weekend Security Investigation"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"507\" class=\"elementor elementor-507\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-6d2ef3de elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"6d2ef3de\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-39d98826\" data-id=\"39d98826\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-709d4b07 elementor-widget elementor-widget-text-editor\" data-id=\"709d4b07\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Today, I received an SMS notification from a random, government-looking number.<\/p>\n<p><!-- \/wp:paragraph --><!-- wp:image {\"id\":511,\"sizeSlug\":\"large\",\"linkDestination\":\"none\"} --><\/p>\n<figure><img decoding=\"async\" src=\"https:\/\/www.pethuraj.com\/blog\/wp-content\/uploads\/2026\/09\/image-3-918x1024.png\" alt=\"\"><\/figure>\n<p><!-- \/wp:image --><!-- wp:paragraph --><\/p>\n<p>The message claimed that there was a <strong>traffic violation<\/strong> against my vehicle. It had my <strong>vehicle number correctly mentioned<\/strong>, along with a challan number and a <strong>\u20b91,000 fine<\/strong>.<\/p>\n<p><!-- \/wp:paragraph --><!-- wp:paragraph --><\/p>\n<p>Below the message was a link to a website that looked like an official Parivahan-related domain:<\/p>\n<p><!-- \/wp:paragraph --><!-- wp:code --><\/p>\n<pre><code>mparivahaninfoin.online<\/code><\/pre>\n<p><!-- \/wp:code --><!-- wp:paragraph --><\/p>\n<p>I did not click on the link.<\/p>\n<p><!-- \/wp:paragraph --><!-- wp:paragraph --><\/p>\n<p>Instead, I went to Google and accessed the <strong>official Parivahan website<\/strong> directly to check whether there were any challans issued against my vehicle.<\/p>\n<p><!-- \/wp:paragraph --><!-- wp:paragraph --><\/p>\n<p>As expected, <strong>there was none.<\/strong><\/p>\n<p><!-- \/wp:paragraph --><!-- wp:paragraph --><\/p>\n<p>So, I thought, why not turn this into a weekend security investigation and find out what is actually behind this fake domain?<\/p>\n<p><!-- \/wp:paragraph --><!-- wp:paragraph --><\/p>\n<p>I did not open the link directly from my regular browser. Instead, I used a <strong>Tor Browser<\/strong> to access the website and investigate what happens.<\/p>\n<p><!-- \/wp:paragraph --><!-- wp:paragraph --><\/p>\n<p>The website prompted me to download an Android APK file named:<\/p>\n<p><!-- \/wp:paragraph --><!-- wp:code --><\/p>\n<pre><code>NextGen_mParivahan.apk<\/code><\/pre>\n<p><!-- \/wp:code --><!-- wp:paragraph --><\/p>\n<p>I started with some basic analysis using online tools such as <strong>VirusTotal<\/strong> to understand the application and check whether it had any known malware signatures.<\/p>\n<p><!-- \/wp:paragraph --><!-- wp:paragraph --><\/p>\n<p>Interestingly, the APK <strong>passed almost all the security checks on VirusTotal<\/strong>.<\/p>\n<p><!-- \/wp:paragraph --><!-- wp:image {\"id\":509,\"sizeSlug\":\"large\",\"linkDestination\":\"none\"} --><\/p>\n<figure><img decoding=\"async\" src=\"https:\/\/www.pethuraj.com\/blog\/wp-content\/uploads\/2026\/09\/image-1-1024x416.png\" alt=\"\"><\/figure>\n<p><!-- \/wp:image --><!-- wp:paragraph --><\/p>\n<p>Only <strong>Kaspersky detected it as a possible Banking Trojan.<\/strong><\/p>\n<p><!-- \/wp:paragraph --><!-- wp:paragraph --><\/p>\n<p>I decided to go a step further and perform a deeper analysis of the application.<\/p>\n<p><!-- \/wp:paragraph --><!-- wp:paragraph --><\/p>\n<p>During the analysis, I found something interesting.<\/p>\n<p><!-- \/wp:paragraph --><!-- wp:paragraph --><\/p>\n<p>The application was using a <strong>trusted Android package name to disguise itself behind a legitimate identity<\/strong>.<\/p>\n<p><!-- \/wp:paragraph --><!-- wp:paragraph --><\/p>\n<p>The package name found in the application was:<\/p>\n<p><!-- \/wp:paragraph --><!-- wp:code --><\/p>\n<pre><code>org.huawei.banking<\/code><\/pre>\n<p><!-- \/wp:code --><!-- wp:image {\"id\":508,\"sizeSlug\":\"large\",\"linkDestination\":\"none\"} --><\/p>\n<figure><img decoding=\"async\" src=\"https:\/\/www.pethuraj.com\/blog\/wp-content\/uploads\/2026\/09\/image-1024x298.png\" alt=\"\"><\/figure>\n<p><!-- \/wp:image --><!-- wp:paragraph --><\/p>\n<p>I quickly searched for this package name and found that it is associated with a <strong>legitimate Huawei application<\/strong>.<\/p>\n<p><!-- \/wp:paragraph --><!-- wp:paragraph --><\/p>\n<p>This raised an important point.<\/p>\n<p><!-- \/wp:paragraph --><!-- wp:paragraph --><\/p>\n<p>Attackers can use <strong>trusted or familiar package names to make a malicious application appear legitimate<\/strong>.<\/p>\n<p><!-- \/wp:paragraph --><!-- wp:paragraph --><\/p>\n<p>The idea is simple, if the application appears to belong to a trusted organization or vendor, it may not immediately raise suspicion during basic analysis or inspection.<\/p>\n<p><!-- \/wp:paragraph --><!-- wp:paragraph --><\/p>\n<p>It also made me look more closely at how Android handles application permissions and trust. Using a legitimate-looking identity can potentially make the application appear more trustworthy than it actually is, although Android&#8217;s permission model does <strong>not simply grant permissions based on the package name alone<\/strong>.<\/p>\n<p><!-- \/wp:paragraph --><!-- wp:image {\"id\":510,\"sizeSlug\":\"full\",\"linkDestination\":\"none\"} --><\/p>\n<figure><img decoding=\"async\" src=\"https:\/\/www.pethuraj.com\/blog\/wp-content\/uploads\/2026\/09\/image-2.png\" alt=\"\"><\/figure>\n<p><!-- \/wp:image --><!-- wp:paragraph --><\/p>\n<p>I also found multiple IP addresses associated with the application that appeared to point towards <strong>servers located in China<\/strong>.<\/p>\n<p>This raised another important question:<\/p>\n<p><strong>Is the application communicating with these servers and sending user activity or other information to them?<\/strong><\/p>\n<p>At this point, the investigation became much more interesting.<\/p>\n<p>What started as a simple fake challan SMS had now turned into a deeper analysis of a potentially malicious Android application.<\/p>\n<p>And here comes the surprising part. MobSF rated this malicious app at 85\/100. Apparently, even malicious apps can have a good security score. <img decoding=\"async\" class=\"emoji\" role=\"img\" draggable=\"false\" src=\"https:\/\/s.w.org\/images\/core\/emoji\/17.0.2\/svg\/1f604.svg\" alt=\"\ud83d\ude04\"><\/p>\n<p><\/p>\n<p><!-- \/wp:paragraph --><!-- wp:paragraph --><\/p>\n<p><!-- \/wp:paragraph --><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-45e5acd elementor-widget elementor-widget-image\" data-id=\"45e5acd\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img fetchpriority=\"high\" decoding=\"async\" width=\"640\" height=\"104\" src=\"https:\/\/www.pethuraj.com\/blog\/wp-content\/uploads\/2026\/09\/Mobsf-score-1-1024x167.png\" class=\"attachment-large size-large wp-image-517\" alt=\"\" srcset=\"https:\/\/www.pethuraj.com\/blog\/wp-content\/uploads\/2026\/09\/Mobsf-score-1-1024x167.png 1024w, https:\/\/www.pethuraj.com\/blog\/wp-content\/uploads\/2026\/09\/Mobsf-score-1-300x49.png 300w, https:\/\/www.pethuraj.com\/blog\/wp-content\/uploads\/2026\/09\/Mobsf-score-1-768x126.png 768w, https:\/\/www.pethuraj.com\/blog\/wp-content\/uploads\/2026\/09\/Mobsf-score-1-1536x251.png 1536w, https:\/\/www.pethuraj.com\/blog\/wp-content\/uploads\/2026\/09\/Mobsf-score-1.png 1553w\" sizes=\"(max-width: 640px) 100vw, 640px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-4b7ac08 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"4b7ac08\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-01dd160\" data-id=\"01dd160\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-4da7002 elementor-widget elementor-widget-text-editor\" data-id=\"4da7002\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>I did not dynamically analyze the domain, as I didn&#8217;t feel it was worth spending time on it. My main objective was to understand <strong>how the malicious application behaves and where it communicates<\/strong>. The focus was to get enough visibility into its behavior and communication patterns to better understand and stay ahead of similar cyber threats.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-1a1a647 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"1a1a647\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-28d8123\" data-id=\"28d8123\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-050504a elementor-widget elementor-widget-text-editor\" data-id=\"050504a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>That\u2019s it for this blog. I hope you learnt something useful from this small investigation and, more importantly, got a reminder to <strong>think twice before clicking on links that look genuine.<\/strong><br \/><br \/>\u2014 Stay Ethical, Hack Responsibly.<br \/><a class=\"uEqukYzWxnqXHKrKojGJOZVdLhpxYQnkhCVRI \" tabindex=\"0\" href=\"https:\/\/www.pethuraj.com\/\" target=\"_self\" data-test-app-aware-link=\"\">https:\/\/www.pethuraj.com<\/a> \u2728<br \/>Follow me on \ud835\udd4f for more cybersecurity insights, tools, and tips: <a class=\"uEqukYzWxnqXHKrKojGJOZVdLhpxYQnkhCVRI \" tabindex=\"0\" href=\"https:\/\/x.com\/pethuraj\" target=\"_self\" data-test-app-aware-link=\"\">https:\/\/x.com\/pethuraj<\/a> \ud83d\ude80<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Today, I received an SMS notification from a random, government-looking number. The message claimed that there was a traffic violation against my vehicle. It had<\/p>\n","protected":false},"author":1,"featured_media":515,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-507","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.5 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>I Received a Fake Traffic Violation Challan. What I Found Behind It Turned Into a Weekend Security Investigation - Pethuraj&#039;s Blog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.pethuraj.com\/blog\/fake-challan-security-investigation\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"I Received a Fake Traffic Violation Challan. What I Found Behind It Turned Into a Weekend Security Investigation - Pethuraj&#039;s Blog\" \/>\n<meta property=\"og:description\" content=\"Today, I received an SMS notification from a random, government-looking number. The message claimed that there was a traffic violation against my vehicle. It had\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.pethuraj.com\/blog\/fake-challan-security-investigation\/\" \/>\n<meta property=\"og:site_name\" content=\"Pethuraj&#039;s Blog\" \/>\n<meta property=\"article:published_time\" content=\"2026-09-06T16:06:55+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-09-06T16:09:25+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.pethuraj.com\/blog\/wp-content\/uploads\/2026\/09\/Fake-Challan-Violations-Investigation.png\" \/>\n\t<meta property=\"og:image:width\" content=\"800\" \/>\n\t<meta property=\"og:image:height\" content=\"400\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@Pethuraj\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.pethuraj.com\\\/blog\\\/fake-challan-security-investigation\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.pethuraj.com\\\/blog\\\/fake-challan-security-investigation\\\/\"},\"author\":{\"name\":\"admin\",\"@id\":\"https:\\\/\\\/www.pethuraj.com\\\/blog\\\/#\\\/schema\\\/person\\\/6753ae21567c179c4592cb8ed33406aa\"},\"headline\":\"I Received a Fake Traffic Violation Challan. What I Found Behind It Turned Into a Weekend Security Investigation\",\"datePublished\":\"2026-09-06T16:06:55+00:00\",\"dateModified\":\"2026-09-06T16:09:25+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.pethuraj.com\\\/blog\\\/fake-challan-security-investigation\\\/\"},\"wordCount\":571,\"publisher\":{\"@id\":\"https:\\\/\\\/www.pethuraj.com\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.pethuraj.com\\\/blog\\\/fake-challan-security-investigation\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.pethuraj.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/Fake-Challan-Violations-Investigation.png\",\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.pethuraj.com\\\/blog\\\/fake-challan-security-investigation\\\/\",\"url\":\"https:\\\/\\\/www.pethuraj.com\\\/blog\\\/fake-challan-security-investigation\\\/\",\"name\":\"I Received a Fake Traffic Violation Challan. What I Found Behind It Turned Into a Weekend Security Investigation - Pethuraj&#039;s Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.pethuraj.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.pethuraj.com\\\/blog\\\/fake-challan-security-investigation\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.pethuraj.com\\\/blog\\\/fake-challan-security-investigation\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.pethuraj.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/Fake-Challan-Violations-Investigation.png\",\"datePublished\":\"2026-09-06T16:06:55+00:00\",\"dateModified\":\"2026-09-06T16:09:25+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.pethuraj.com\\\/blog\\\/fake-challan-security-investigation\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.pethuraj.com\\\/blog\\\/fake-challan-security-investigation\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.pethuraj.com\\\/blog\\\/fake-challan-security-investigation\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.pethuraj.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/Fake-Challan-Violations-Investigation.png\",\"contentUrl\":\"https:\\\/\\\/www.pethuraj.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/Fake-Challan-Violations-Investigation.png\",\"width\":800,\"height\":400},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.pethuraj.com\\\/blog\\\/fake-challan-security-investigation\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.pethuraj.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"I Received a Fake Traffic Violation Challan. What I Found Behind It Turned Into a Weekend Security Investigation\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.pethuraj.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.pethuraj.com\\\/blog\\\/\",\"name\":\"Pethuraj&#039;s Blog\",\"description\":\"Bug Bounty Writeups\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.pethuraj.com\\\/blog\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.pethuraj.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.pethuraj.com\\\/blog\\\/#organization\",\"name\":\"Pethuraj&#039;s Blog\",\"url\":\"https:\\\/\\\/www.pethuraj.com\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.pethuraj.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.pethuraj.com\\\/blog\\\/wp-content\\\/uploads\\\/2021\\\/05\\\/pethuraj.png\",\"contentUrl\":\"https:\\\/\\\/www.pethuraj.com\\\/blog\\\/wp-content\\\/uploads\\\/2021\\\/05\\\/pethuraj.png\",\"width\":949,\"height\":268,\"caption\":\"Pethuraj&#039;s Blog\"},\"image\":{\"@id\":\"https:\\\/\\\/www.pethuraj.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.pethuraj.com\\\/blog\\\/#\\\/schema\\\/person\\\/6753ae21567c179c4592cb8ed33406aa\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/62aeafbe8da471ade35eb14bbbac3f6c7206b2574d0889bd6b1128fb61ca5644?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/62aeafbe8da471ade35eb14bbbac3f6c7206b2574d0889bd6b1128fb61ca5644?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/62aeafbe8da471ade35eb14bbbac3f6c7206b2574d0889bd6b1128fb61ca5644?s=96&d=mm&r=g\",\"caption\":\"admin\"},\"sameAs\":[\"https:\\\/\\\/pethuraj.com\\\/blog\",\"https:\\\/\\\/www.linkedin.com\\\/in\\\/pethu\\\/\",\"https:\\\/\\\/x.com\\\/Pethuraj\"],\"url\":\"https:\\\/\\\/www.pethuraj.com\\\/blog\\\/author\\\/admin\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"I Received a Fake Traffic Violation Challan. What I Found Behind It Turned Into a Weekend Security Investigation - Pethuraj&#039;s Blog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.pethuraj.com\/blog\/fake-challan-security-investigation\/","og_locale":"en_US","og_type":"article","og_title":"I Received a Fake Traffic Violation Challan. What I Found Behind It Turned Into a Weekend Security Investigation - Pethuraj&#039;s Blog","og_description":"Today, I received an SMS notification from a random, government-looking number. The message claimed that there was a traffic violation against my vehicle. It had","og_url":"https:\/\/www.pethuraj.com\/blog\/fake-challan-security-investigation\/","og_site_name":"Pethuraj&#039;s Blog","article_published_time":"2026-09-06T16:06:55+00:00","article_modified_time":"2026-09-06T16:09:25+00:00","og_image":[{"width":800,"height":400,"url":"https:\/\/www.pethuraj.com\/blog\/wp-content\/uploads\/2026\/09\/Fake-Challan-Violations-Investigation.png","type":"image\/png"}],"author":"admin","twitter_card":"summary_large_image","twitter_creator":"@Pethuraj","twitter_misc":{"Written by":"admin","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.pethuraj.com\/blog\/fake-challan-security-investigation\/#article","isPartOf":{"@id":"https:\/\/www.pethuraj.com\/blog\/fake-challan-security-investigation\/"},"author":{"name":"admin","@id":"https:\/\/www.pethuraj.com\/blog\/#\/schema\/person\/6753ae21567c179c4592cb8ed33406aa"},"headline":"I Received a Fake Traffic Violation Challan. What I Found Behind It Turned Into a Weekend Security Investigation","datePublished":"2026-09-06T16:06:55+00:00","dateModified":"2026-09-06T16:09:25+00:00","mainEntityOfPage":{"@id":"https:\/\/www.pethuraj.com\/blog\/fake-challan-security-investigation\/"},"wordCount":571,"publisher":{"@id":"https:\/\/www.pethuraj.com\/blog\/#organization"},"image":{"@id":"https:\/\/www.pethuraj.com\/blog\/fake-challan-security-investigation\/#primaryimage"},"thumbnailUrl":"https:\/\/www.pethuraj.com\/blog\/wp-content\/uploads\/2026\/09\/Fake-Challan-Violations-Investigation.png","inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.pethuraj.com\/blog\/fake-challan-security-investigation\/","url":"https:\/\/www.pethuraj.com\/blog\/fake-challan-security-investigation\/","name":"I Received a Fake Traffic Violation Challan. What I Found Behind It Turned Into a Weekend Security Investigation - Pethuraj&#039;s Blog","isPartOf":{"@id":"https:\/\/www.pethuraj.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.pethuraj.com\/blog\/fake-challan-security-investigation\/#primaryimage"},"image":{"@id":"https:\/\/www.pethuraj.com\/blog\/fake-challan-security-investigation\/#primaryimage"},"thumbnailUrl":"https:\/\/www.pethuraj.com\/blog\/wp-content\/uploads\/2026\/09\/Fake-Challan-Violations-Investigation.png","datePublished":"2026-09-06T16:06:55+00:00","dateModified":"2026-09-06T16:09:25+00:00","breadcrumb":{"@id":"https:\/\/www.pethuraj.com\/blog\/fake-challan-security-investigation\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.pethuraj.com\/blog\/fake-challan-security-investigation\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.pethuraj.com\/blog\/fake-challan-security-investigation\/#primaryimage","url":"https:\/\/www.pethuraj.com\/blog\/wp-content\/uploads\/2026\/09\/Fake-Challan-Violations-Investigation.png","contentUrl":"https:\/\/www.pethuraj.com\/blog\/wp-content\/uploads\/2026\/09\/Fake-Challan-Violations-Investigation.png","width":800,"height":400},{"@type":"BreadcrumbList","@id":"https:\/\/www.pethuraj.com\/blog\/fake-challan-security-investigation\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.pethuraj.com\/blog\/"},{"@type":"ListItem","position":2,"name":"I Received a Fake Traffic Violation Challan. What I Found Behind It Turned Into a Weekend Security Investigation"}]},{"@type":"WebSite","@id":"https:\/\/www.pethuraj.com\/blog\/#website","url":"https:\/\/www.pethuraj.com\/blog\/","name":"Pethuraj&#039;s Blog","description":"Bug Bounty Writeups","publisher":{"@id":"https:\/\/www.pethuraj.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.pethuraj.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.pethuraj.com\/blog\/#organization","name":"Pethuraj&#039;s Blog","url":"https:\/\/www.pethuraj.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.pethuraj.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.pethuraj.com\/blog\/wp-content\/uploads\/2021\/05\/pethuraj.png","contentUrl":"https:\/\/www.pethuraj.com\/blog\/wp-content\/uploads\/2021\/05\/pethuraj.png","width":949,"height":268,"caption":"Pethuraj&#039;s Blog"},"image":{"@id":"https:\/\/www.pethuraj.com\/blog\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/www.pethuraj.com\/blog\/#\/schema\/person\/6753ae21567c179c4592cb8ed33406aa","name":"admin","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/62aeafbe8da471ade35eb14bbbac3f6c7206b2574d0889bd6b1128fb61ca5644?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/62aeafbe8da471ade35eb14bbbac3f6c7206b2574d0889bd6b1128fb61ca5644?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/62aeafbe8da471ade35eb14bbbac3f6c7206b2574d0889bd6b1128fb61ca5644?s=96&d=mm&r=g","caption":"admin"},"sameAs":["https:\/\/pethuraj.com\/blog","https:\/\/www.linkedin.com\/in\/pethu\/","https:\/\/x.com\/Pethuraj"],"url":"https:\/\/www.pethuraj.com\/blog\/author\/admin\/"}]}},"_links":{"self":[{"href":"https:\/\/www.pethuraj.com\/blog\/wp-json\/wp\/v2\/posts\/507","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.pethuraj.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.pethuraj.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.pethuraj.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.pethuraj.com\/blog\/wp-json\/wp\/v2\/comments?post=507"}],"version-history":[{"count":14,"href":"https:\/\/www.pethuraj.com\/blog\/wp-json\/wp\/v2\/posts\/507\/revisions"}],"predecessor-version":[{"id":528,"href":"https:\/\/www.pethuraj.com\/blog\/wp-json\/wp\/v2\/posts\/507\/revisions\/528"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.pethuraj.com\/blog\/wp-json\/wp\/v2\/media\/515"}],"wp:attachment":[{"href":"https:\/\/www.pethuraj.com\/blog\/wp-json\/wp\/v2\/media?parent=507"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.pethuraj.com\/blog\/wp-json\/wp\/v2\/categories?post=507"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.pethuraj.com\/blog\/wp-json\/wp\/v2\/tags?post=507"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}