portaldeservicosc[.]com

This domain, portaldeservicosc.com, is identified as a credential harvesting phishing site designed to mimic legitimate service portals. Analysis indicates no direct association with known drainer kits or specific brands, though the generic phishing classification suggests broad targeting of user credentials and sensitive information. The page title 'Carregando...' implies a loading screen, likely intended to deceive users while backend scripts capture submitted data. Infrastructure analysis reveals the domain was registered on May 05, 2026, through a registrar utilizing Cloudflare, Inc. It resolves to the IP address 45.232.231.155 and employs a Let's Encrypt SSL certificate, providing a superficial layer of legitimacy. On VirusTotal, 5 out of 95 security vendors flag the domain as malicious, while it appears on one additional security blocklist. The hosting environment is identified as Ubuntu with an Apache HTTP Server, and no presence is recorded on Google Safe Browsing (GSB). The domain is currently offline, reducing immediate risk to users. However, the infrastructure remains registered and could be reactivated. Response actions should include monitoring for re-emergence, updating blocklists, and alerting users who may have interacted with the domain. Remaining risk is elevated due to the domain's recent creation and the potential for reuse. Organizations are advised to implement DNS-based blocking for the domain and IP, while users should verify service portals through official channels before entering credentials.