# PhishDestroy domain threat record: alessandramarcondes.com.br Content language: English Canonical HTML report: https://phishdestroy.io/domain/alessandramarcondes.com.br/ Machine-readable companion: https://phishdestroy.io/domain/alessandramarcondes.com.br/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-21 00:01:23 UTC - Last availability or vendor check: 2026-10-22 10:26:00 UTC - Stored record updated: 2026-10-22 16:07:29 UTC - VirusTotal detections in the stored snapshot: 16/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 50.116.87.93 - Registrar in stored WHOIS data: REGISTRAR_NOT_FOUND - Last stored HTTP status: 200 - Registration date (registry RDAP, alessandramarcondes.com.br): 2008-10-03 18:18:43 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a15bc2-4e07-757f-b320-07e05e1f104c/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/alessandramarcondes.com.br - Certificate Transparency search: https://crt.sh/?q=%25.alessandramarcondes.com.br - Web Archive lookup: https://web.archive.org/web/*/https://alessandramarcondes.com.br/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy added the domain to its internal blocklist as a suspicious domain. The recorded page title is "Alessandra Marcondes – Contabilidade". The domain was first seen by PhishDestroy on 2026-10-21 and an HTTP 200 response was recorded on that date. How the scam works The classification stems from multiple security vendors labeling the domain as phishing or malware, indicating it could be used to host deceptive pages, harvest credentials, or deliver malicious payloads. No specific malicious behavior was observed on the fetched page, so the exact technique cannot be confirmed. Evidence VirusTotal scanned the domain on 2026-10-21 and reported 13 malicious and 3 suspicious detections from 92 engines, for a total of 16 detections. Google Safe Browsing checked on the same day and did not flag the site. urlscan.io captured the site on 2026-10-21, returned an overall non‑malicious verdict with a score of 0 and no engine flagged it as malicious. Cloudflare Radar recorded the domain on 2026-10-21 and marked it as malicious under the malware category. OTX listed five pulses referencing the domain as of 2026-10-21. PhishDestroy’s internal blocklist also records the domain as listed. Infrastructure The domain resolved to the IP address 50.116.87.93, which belongs to the WEBSITEWELCOME.COM network. The recorded country for that network is Brazil; no additional registrar or hosting details are available. What to do Visitors should avoid entering any credentials or downloading files from the site; if credentials were entered, change the associated passwords and monitor the accounts for unusual activity. Organizations should add alessandramarcondes.com.br to web‑filtering and intrusion‑detection rules and review logs for connections to 50.116.87.93. No further action is required if no interaction occurred. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a15bc2-4e07-757f-b320-07e05e1f104c/ VirusTotal report: https://www.virustotal.com/gui/domain/alessandramarcondes.com.br Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=alessandramarcondes.com.br Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-21 02:33:05 UTC ## Stored page captures - Primary capture: https://i.ibb.co/67FZmMCs/c730db0e5faa.png Captured: 2026-10-21 00:01:23 UTC - URLScan capture: https://screenshots.phishdestroy.io/01a15bc2-4e07-757f-b320-07e05e1f104c.png Captured: 2026-10-21 00:01:23 UTC Source report: https://urlscan.io/result/01a15bc2-4e07-757f-b320-07e05e1f104c/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/3c2a3160-98b0-40b6-8153-a06242414082.png Captured: 2026-10-21 00:01:56 UTC Source report: https://radar.cloudflare.com/scan/3c2a3160-98b0-40b6-8153-a06242414082 SHA-256: 96a3684e695f7c03b6aae1a0267ebcfb536816d2ddda891d9bdc9a19795484c0 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-21T00:02:15Z", "uuid": "01a15bc2-4e07-757f-b320-07e05e1f104c", "scanned_at": "2026-10-21T00:00:34Z", "final_url": "https://alessandramarcondes.com.br/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://alessandramarcondes.com.br/", "from": "http://alessandramarcondes.com.br/", "status": 307 }, { "to": "http://alessandramarcondes.com.br/", "from": "https://alessandramarcondes.com.br/", "status": 307 }, { "to": "https://alessandramarcondes.com.br/", "from": "http://alessandramarcondes.com.br/", "status": 301 } ], "ip": "50.116.87.93", "ptr": "50-116-87-93.unifiedlayer.com", "domains": [ "fonts.googleapis.com", "fonts.gstatic.com" ], "ips": [ "192.178.183.94", "142.251.127.95", "50.116.87.93" ], "asns": [ "15169", "31898" ], "countries": [ "US", "BR" ], "link_domains": [ "api.whatsapp.com", "seventymkt.com.br" ], "social": [ "https://api.whatsapp.com/send" ], "doc_hash": "a45bc2e57893af12d6cf62078bacb52319b8257b8bf2405f2bbdd7f0d49379a7", "script_hashes": [ "6f35273b8502706ee06854d797337ab40bc1b3a7421960a2ceb5392ac85a0f54", "cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf", "5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89", "268cae8c2e7a7330526dd33b7dadc1bbd08b039bca4acd70390d81a7ef644767", "b374e10bcffae8cceceba134d3e33a9fc0d92a18d4cb5285ffa8242bebb96aae", "c66f47147d5fe3cceeaa47a93ff7440a328f859b049deec2f9d8f414e9137474", "b7a27a4b4abfc300eaf7d9151afeef8df2663d98586e38f59f91bbe98ef30af7", "1842d6e4d3c7399fdb01ab4b0a7dd5c1d9c096110de0532181ed581f14e9e813", "99d966f994d81a901738b97d25d0650de384b1aa79ab4f7b375618cd722e9e04", "ff5ed7a1b8437b00185f3551abd665832475d787a8720bbe8040eef677a6660a" ], "globals": [ "___FONT_AWESOME___", "fontawesome-free-shims", "jQuery", "webpackChunkelementorFrontend", "elementorModules", "EAELImageMaskingConfig", "elementorFrontendConfig", "elementorFrontend", "localize", "isEditMode", "ea", "eael", "webpackChunkelementor_pro", "wp", "ElementorProFrontendConfig", "elementorProFrontend", "_wpemojiSettings", "twemoji" ], "storage_keys": [ "wpEmojiSettingsSupports" ], "tls": { "san": [ "*.alessandramarcondes.com.br", "alessandramarcondes.com.br" ], "cipher": "AES_256_GCM", "issuer": "YR1", "subject": "alessandramarcondes.com.br", "protocol": "TLS 1.3", "valid_to": "2026-12-28T12:44:18Z", "valid_from": "2026-09-29T12:44:19Z" }, "domain_age_days": 3024, "apex_age_days": 3024, "tls_age_days": 21, "tls_valid_days": 89, "requests": 40, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": -69, "malicious": false }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "Apache", "content-type": "text/html; charset=UTF-8" } }, "cf": { "v": 1, "fetched_at": "2026-10-21T00:02:16Z", "uuid": "3c2a3160-98b0-40b6-8153-a06242414082", "scanned_at": "2026-10-21T00:01:56Z", "final_url": "https://alessandramarcondes.com.br/", "status": 200, "history": [ { "url": "https://alessandramarcondes.com.br/", "status": 200 } ], "dom_hash": "754a03b5120ed52dc1df1765f4d7d8a30b78a3e187648562995aa90e2358f7ec", "doc_hash": "a45bc2e57893af12d6cf62078bacb52319b8257b8bf2405f2bbdd7f0d49379a7", "domain_risks": [ "Malware", "Security threats", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "alessandramarcondes.com.br", "type": "A", "value": "50.116.87.93" } ], "dnssec_valid": false, "ip": "50.116.87.93", "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-21T02:32:40Z", "analysis_at": "2026-10-20T23:47:09Z", "stats": { "timeout": 0, "harmless": 45, "malicious": 13, "suspicious": 3, "undetected": 31 }, "detections": { "DNS8": "suspicious", "ESET": "suspicious", "VIPRE": "malware", "G-Data": "phishing", "Lionic": "phishing", "Sophos": "phishing", "CyRadar": "phishing", "Webroot": "malicious", "Fortinet": "phishing", "SOCRadar": "phishing", "Kaspersky": "phishing", "Gridinsoft": "suspicious", "BitDefender": "phishing", "Chong Lua Dao": "malicious", "alphaMountain.ai": "phishing", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "categories": { "Sophos": "phishing and fraud", "Webroot": "Phishing and Other Frauds", "alphaMountain.ai": "Phishing (alphaMountain.ai)", "Forcepoint ThreatSeeker": "phishing and other frauds" }, "expires": "2027-10-03T00:00:00Z", "first_seen": "2024-11-29T11:58:00Z", "dns": [ { "ttl": 21600, "type": "NS", "value": "ns212.prodns.com.br" }, { "ttl": 14400, "type": "TXT", "value": "v=spf1 a mx include:websitewelcome.com ~all" }, { "ttl": 14400, "type": "A", "value": "50.116.87.93" }, { "ttl": 14400, "type": "MX", "value": "mail.alessandramarcondes.com.br", "priority": 0 }, { "ttl": 21600, "type": "NS", "value": "ns213.prodns.com.br" }, { "ttl": 14400, "type": "TXT", "value": "google-site-verification=0D0vAsbzstQYPiSs028TkAeoXB4CJHYk3AbskESsveI" }, { "ttl": 21600, "type": "SOA", "rname": "braga.inw.com.br", "value": "ns212.prodns.com.br" } ], "dns_at": "2026-10-20T23:47:25Z", "jarm": "29d29d15d29d29d00042d42d000000cd600c085f371f8533aaf66051f8e5b1", "cert": { "san": [ "*.alessandramarcondes.com.br", "alessandramarcondes.com.br" ], "issuer": "Let's Encrypt / YR1", "serial": "5f1345e24bcac5dd898591b13dd196863d2", "sha256": "4f43c08280c03ee85af323c48af5536ee9b2cb0a6cc1d8e23b0a8f94d4ed52d5", "subject": "alessandramarcondes.com.br", "valid_to": "2026-12-28T12:44:18Z", "valid_from": "2026-09-29T12:44:19Z" } }, "webcheck": { "v": 1, "fetched_at": "2026-10-21T00:02:32Z", "mail_config": { "mx": [ "mail.alessandramarcondes.com.br" ], "spf": "v=spf1 a mx include:websitewelcome.com ~all", "dkim": [ "default" ], "dkim_bits": 2048, "spf_lookups": 10 }, "caa_records": { "domain": "alessandramarcondes.com.br" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "archives": { "last": "2025-03-29T10:15:15Z", "first": "2009-06-23T07:50:35Z", "changes": 11, "days_archived": 24, "scans_per_day": 0, "avg_page_bytes": 559 }, "robots_txt": { "agents": [ "*" ], "present": true, "sitemaps": [ "https://alessandramarcondes.com.br/sitemap.xml" ] }, "sitemap": { "present": true, "url_count": 1 }, "social_tags": { "title": "Alessandra Marcondes – Contabilidade", "robots": "max-image-preview:large", "generator": "Elementor 4.2.4; features: e_font_icon_svg, additional_custom_breakpoints; settings: css_print_method-external, google_font-enabled, font_display-swap", "canonicalUrl": "https://alessandramarcondes.com.br/" }, "trackers": { "requests": 38, "trackers": [ { "name": "Google Fonts", "company": "Google", "country": "US", "category": "Hosting", "requests": 3 }, { "name": "Google Static", "company": "Google", "country": "US", "category": "Hosting", "requests": 2 } ] }, "mixed_content": { "third_party_scripts": 0 }, "status": { "up": true, "code": 200, "timings": { "dns": 155, "tls": 198, "wait": 426, "connect": 199, "download": 196 }, "response_ms": 1174 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 21, 22, 25, 53, 80, 110, 143, 443, 587, 993, 995, 3306 ] }, "carbon": { "bytes": 40059, "co2_grams": 0.0015, "cleaner_than": 42 }, "dns_server": { "ns": [ { "ip": "50.116.87.92", "host": "ns213.prodns.com.br" }, { "ip": "50.116.87.91", "host": "ns212.prodns.com.br" } ], "zone": "alessandramarcondes.com.br" }, "location": { "ip": "50.116.87.93", "asn": "31898", "org": "WEBSITEWELCOME.COM", "city": "Vinhedo", "country": "BR" }, "ssl": { "issuer": "Let's Encrypt / YR1", "subject": "alessandramarcondes.com.br" }, "dns": { "A": [ "50.116.87.93" ], "MX": [ "{\"exchange\": \"mail.alessandramarcondes.com.br\", \"priority\": 0}" ], "NS": [ "ns212.prodns.com.br", "ns213.prodns.com.br" ], "SOA": "{\"nsname\": \"ns212.prodns.com.br\", \"hostmaster\": \"braga.inw.com.br\", \"serial\": 2026092901, \"refresh\": 86400, \"retry\": 7200, \"expire\": 3600000, \"minttl\": 86400}", "TXT": [ "v=spf1 a mx include:websitewelcome.com ~all", "google-site-verification=0D0vAsbzstQYPiSs028TkAeoXB4CJHYk3AbskESsveI" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "50.116.87.93", "family": 4 }, "redirects": { "chain": [ "https://alessandramarcondes.com.br" ] }, "tech_stack": { "technologies": [ "WordPress", "MySQL", "PHP", "Hello Elementor", "Elementor", "Apache HTTP Server", "jQuery UI", "jQuery Migrate", "jQuery", "Font Awesome", "core-js", "WhatsApp Business Chat", "Priority Hints", "Google Font API", "Webpack", "RSS", "Module Federation" ] }, "linked_pages": { "external": [ "https://api.whatsapp.com/send/", "https://seventymkt.com.br/" ], "external_count": 2 }, "whois": { "created": "2008-10-03T00:00:00Z", "expires": "2027-10-03T00:00:00Z", "status": [ "published" ], "nameservers": [ "ns1.inwcloud.com.br", "ns2.inwcloud.com.br" ] }, "headers": { "headers": { "server": "Apache", "content-type": "text/html; charset=UTF-8" } } } } ```