stonewall[.]com[.]br

PhishDestroy has identified stonewall.com.br as a generic phishing domain impersonating Stonewall Pedras, a Brazilian stone retailer. The site was designed to deceive users into divulging sensitive information, though no specific drainer kit was detected. The domain was registered through Bluehost and resolves to IP address 162.240.144.202, with a creation date of February 21, 2026.

Technical indicators reveal that the domain is flagged by 10 out of 95 security vendors on VirusTotal, and it appears on one security blocklist. The SSL certificate was issued by Let's Encrypt (R12), and AlienVault OTX shows it was included in one threat intelligence pulse. Google Safe Browsing status was not explicitly provided, but the domain's presence on a blocklist suggests malicious activity.

The domain is now offline, indicating that response actions have been taken to mitigate the threat. However, users should remain vigilant as similar domains may appear. It is recommended to avoid clicking links from unsolicited messages and to verify URLs directly with the official Stonewall Pedras website. Always check for HTTPS and report suspicious sites to security authorities.