radiocontraponto[.]org[.]br

radiocontraponto.org.br was observed to resolve to the IPv4 address 186.226.63.2, which is announced by AS262954 belonging to VirtuaServer Informatica Ltda in Brazil. The domain is delegated to the authoritative name servers ns1.cp3.sh15.net and ns2.cp3.sh15.net. WHOIS data shows the domain was registered on 28 November 2014. No TLS certificate is presented; HTTP requests return a generic "Account Suspended" page title, indicating that the site is currently offline or deliberately taken down.

The host is listed on a single security blocklist and was flagged by five of ninety‑five VirusTotal scanners, suggesting that at least some detection engines have identified malicious or suspicious activity associated with the domain. AlienVault OTX references the domain in one threat‑intel pulse, reinforcing its classification as a malicious resource. PhishDestroy has reported the domain as taken offline and attributes the activity to an account‑takeover (ATO) campaign. The available evidence does not disclose the specific victim brand or the exact phishing kit used, so the precise content of the original fraudulent pages remains unknown.

Defenders should continue to block traffic to 186.226.63.2 and to the domain itself at DNS level, monitor for any re‑hosting attempts by the same infrastructure, and incorporate the domain into URL filtering and threat‑intel feeds. Because the site currently returns only an "Account Suspended" title, any live exploit payloads are not observable, but historical activity indicates the domain has been employed in credential‑harvesting attempts. Ongoing vigilance is recommended, especially for organizations whose employees may have been targeted by account‑takeover lures that reference this domain or similar infrastructure.