estanciarefrigeracao[.]com[.]br

This domain, estanciarefrigeracao.com.br, operates as a high-risk phishing site designed to impersonate legitimate HVAC service providers under the guise of 'Estância – Climatização.' Analysis indicates the site presents a fraudulent login portal, likely intended to harvest credentials from unsuspecting users seeking climate control services. The page title, 'Estância – Climatização,' mimics authentic branding, increasing the likelihood of successful deception among Portuguese-speaking targets, particularly in Brazil where the domain’s top-level country code (.br) is commonly associated with local businesses. Infrastructure analysis reveals multiple technical indicators supporting the phishing classification. The domain resolves to the IP address 162.241.203.111, hosted under AS19871 (Network Solutions, LLC) in the United States, despite its Brazilian top-level domain. It was registered through Bluehost on February 21, 2026, an anomalous creation date suggesting potential domain spoofing or backdating. Security vendor detections on VirusTotal report 21 out of 95 engines flagging the domain as malicious. Additionally, the domain appears on one security blocklist and is actively blocked by enterprise phishing detection systems. Notably, the site lacks an SSL certificate, a red flag for any credential-collection portal. Users who visited estanciarefrigeracao.com.br should take immediate remediation steps. Any entered credentials must be considered compromised and should be changed across all platforms where reused. System scans using updated endpoint protection tools are recommended to detect potential secondary infections. Network logs should be reviewed for connections to 162.241.203.111 or related hostnames. Organizations are advised to update internal blocklists to include this domain and its resolving IP to prevent future access attempts. Given the domain’s current offline status, monitoring for re-emergence under similar naming conventions is strongly advised.