# PhishDestroy domain threat record: clinicadeolhosuchoa.com.br

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/clinicadeolhosuchoa.com.br/
Machine-readable companion: https://phishdestroy.io/domain/clinicadeolhosuchoa.com.br/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-20 13:46:28 UTC
- Last availability or vendor check: 2026-10-22 10:00:18 UTC
- Stored record updated: 2026-10-22 15:46:58 UTC
- VirusTotal detections in the stored snapshot: 14/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 108.179.193.28
- Registrar in stored WHOIS data: NEWFOLD
- Last stored HTTP status: 200
- Registration date (registry RDAP, clinicadeolhosuchoa.com.br): 2016-03-28 12:22:56 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a1598e-de16-70c9-9ebc-5248f3f0fed0/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/clinicadeolhosuchoa.com.br
- Certificate Transparency search: https://crt.sh/?q=%25.clinicadeolhosuchoa.com.br
- Web Archive lookup: https://web.archive.org/web/*/https://clinicadeolhosuchoa.com.br/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy has listed clinicadeolhosuchoa.com.br as a suspicious domain based on observed indicators. The domain was first seen by PhishDestroy on 2026-10-20.

How the scam works
No specific malicious scheme has been identified for this domain; the available indicators do not pinpoint a particular tactic. In general, domains with similar profiles may be used for phishing, fraud or malware distribution, but the evidence here does not confirm any of those activities.

Evidence
VirusTotal recorded 14 detections from 92 scanning engines on 2026-10-20, with vendors such as Abusix, BitDefender, ESET and Fortinet flagging the site. Google Safe Browsing reported the domain as not flagged as of 2026-10-20. OpenPhish listed the domain on its blocklist (checked 2026-10-20) and PhishDestroy’s internal list also includes it (checked 2026-10-20). OTX shows seven pulses referencing the domain, also checked on 2026-10-20.

Infrastructure
The recorded IP address for clinicadeolhosuchoa.com.br is 108.179.193.28, belonging to AS31898 Oracle Corporation and located in Brazil. No additional registration or hosting details are available beyond this network information.

What to do
Visitors should avoid entering any credentials or downloading files from the site; if credentials were submitted, change the associated passwords immediately. Organizations should block the exact domain and IP address in their perimeter defenses and review logs for any connections to this host. Continue monitoring threat feeds for updates on this domain’s status.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a1598e-de16-70c9-9ebc-5248f3f0fed0/
VirusTotal report: https://www.virustotal.com/gui/domain/clinicadeolhosuchoa.com.br
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=clinicadeolhosuchoa.com.br
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-20 14:25:12 UTC

## Stored page captures

- Primary capture: https://i.ibb.co/DHM9ySdk/53eb09f90ac4.png
  Captured: 2026-10-20 13:46:28 UTC
- URLScan capture: https://screenshots.phishdestroy.io/01a1598e-de16-70c9-9ebc-5248f3f0fed0.png
  Captured: 2026-10-20 13:46:28 UTC
  Source report: https://urlscan.io/result/01a1598e-de16-70c9-9ebc-5248f3f0fed0/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/b0bf61fd-39a5-4742-8913-815b9f6cb019.png
  Captured: 2026-10-20 14:22:17 UTC
  Source report: https://radar.cloudflare.com/scan/b0bf61fd-39a5-4742-8913-815b9f6cb019
  SHA-256: 5b685b6fd0c356b8389e33596a40c60d2f63ca6aac5f9ec6250f109105361924
- URLScan · 2026-07-27: https://screenshots.phishdestroy.io/us/019fa4af-c10b-7226-942a-6a04914d72cb.png
  Captured: 2026-07-27 17:46:59 UTC
  Source report: https://urlscan.io/result/019fa4af-c10b-7226-942a-6a04914d72cb/
  SHA-256: 5694ffac77469ca7d816a381c39530fb4416bbe9e72357928ee801ea106b8e03
- URLScan · 2026-08-05: https://screenshots.phishdestroy.io/us/019fd097-ad2c-755b-b8c8-865189533868.png
  Captured: 2026-08-05 06:23:57 UTC
  Source report: https://urlscan.io/result/019fd097-ad2c-755b-b8c8-865189533868/
  SHA-256: 87739c575c0c9a2ed2c599fa0c9517fef22a57edf6aae017c177384472bf15d4
- URLScan · 2026-08-28: https://screenshots.phishdestroy.io/us/01a04789-23da-7747-936f-6ff0fe5f1eff.png
  Captured: 2026-08-28 08:42:52 UTC
  Source report: https://urlscan.io/result/01a04789-23da-7747-936f-6ff0fe5f1eff/
  SHA-256: 9e87b4a8337fff1e593e3121d6fabe216e9e74f192d94a18f103d50bb6a28e93
- URLScan · 2026-09-01: https://screenshots.phishdestroy.io/us/01a05d8b-69a4-7159-a0f1-839ae976213a.png
  Captured: 2026-09-01 15:17:02 UTC
  Source report: https://urlscan.io/result/01a05d8b-69a4-7159-a0f1-839ae976213a/
  SHA-256: 561033d6950214a867c048c7e3b97d494f5a39ced0615b5a83fb8fe00886e413
- URLScan · 2026-09-30: https://screenshots.phishdestroy.io/us/01a0f2c7-a983-7340-b747-86a9c647c6cb.png
  Captured: 2026-09-30 14:46:16 UTC
  Source report: https://urlscan.io/result/01a0f2c7-a983-7340-b747-86a9c647c6cb/
  SHA-256: 06bc3bc7330a90ca677e14329b7708f491c35bef3699cad106bf943e40c35da5
- URLScan · 2026-10-20: https://screenshots.phishdestroy.io/us/01a159a8-8a78-74da-bf7e-12d3c4e9b08a.png
  Captured: 2026-10-20 14:13:06 UTC
  Source report: https://urlscan.io/result/01a159a8-8a78-74da-bf7e-12d3c4e9b08a/
  SHA-256: df3ce695eeda95f111b61246eece94247a44e1cee863fd5d0198a9abfe6c9599

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-20T16:42:07Z",
        "uuid": "01a1598e-de16-70c9-9ebc-5248f3f0fed0",
        "scanned_at": "2026-10-20T13:45:10Z",
        "final_url": "https://pressanafm.com/099202/chi/engipfs.php",
        "status": 200,
        "redirected": "off-domain",
        "redirects": [
            {
                "to": "https://clinicadeolhosuchoa.com.br/67770/redirecteng.php",
                "from": "http://clinicadeolhosuchoa.com.br/67770/redirecteng.php",
                "status": 307
            },
            {
                "to": "https://pressanafm.com/099202/chi/engipfs.php",
                "from": "https://clinicadeolhosuchoa.com.br/67770/redirecteng.php",
                "status": 302
            },
            {
                "to": "http://clinicadeolhosuchoa.com.br/67770/redirecteng.php",
                "from": "https://pressanafm.com/099202/chi/engipfs.php",
                "status": 307
            },
            {
                "to": "https://pressanafm.com/099202/chi/engipfs.php",
                "from": "http://clinicadeolhosuchoa.com.br/67770/redirecteng.php",
                "status": 302
            }
        ],
        "ip": "217.174.153.64",
        "ptr": "cloud.pressanakia.in",
        "domains": [
            "code.jquery.com",
            "cdnjs.cloudflare.com",
            "clinicadeolhosuchoa.com.br",
            "ka-f.fontawesome.com",
            "image.thum.io",
            "stackpath.bootstrapcdn.com",
            "maxcdn.bootstrapcdn.com",
            "kit.fontawesome.com",
            "fonts.googleapis.com",
            "ajax.googleapis.com",
            "www.google.com"
        ],
        "ips": [
            "172.67.139.119",
            "100.58.9.166",
            "104.18.10.207",
            "104.17.24.14",
            "172.64.147.188",
            "142.250.183.42",
            "151.101.129.155",
            "142.250.195.234",
            "217.174.153.64",
            "108.179.193.28"
        ],
        "asns": [
            "13335",
            "14618",
            "15169",
            "54113",
            "57344",
            "31898"
        ],
        "countries": [
            "US",
            "BG",
            "BR"
        ],
        "doc_hash": "d90d99567ff59a86a0021f8cd9bdd288997fa442b982f6cd68f4be5368122dfb",
        "globals": [
            "$",
            "jQuery",
            "Popper",
            "bootstrap",
            "axios",
            "GetBrowserandLanguage",
            "initializePage",
            "convertToBase64",
            "handleFormSubmission",
            "handleBase64Data",
            "getVisitorIP",
            "getMXRecord",
            "sendVisitorIP",
            "getLocalizedLanguage"
        ],
        "tls": {
            "san": [
                "*.pressanafm.com",
                "pressanafm.com"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "YR2",
            "subject": "*.pressanafm.com",
            "protocol": "TLS 1.3",
            "valid_to": "2027-01-14T08:31:57Z",
            "valid_from": "2026-10-16T08:31:58Z"
        },
        "domain_age_days": 1727,
        "apex_age_days": 1727,
        "tls_age_days": 4,
        "tls_valid_days": 89,
        "requests": 15,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 100,
                "malicious": true
            },
            "overall": {
                "tags": [
                    "phishing"
                ],
                "score": 100,
                "brands": [
                    "genericemail"
                ],
                "malicious": true,
                "categories": [
                    "phishing"
                ]
            },
            "urlscan": {
                "tags": [
                    "phishing"
                ],
                "score": 100,
                "brands": [
                    "Generic Email"
                ],
                "malicious": true,
                "categories": [
                    "phishing"
                ]
            }
        },
        "headers": {
            "server": "Apache",
            "content-type": "text/html; charset=UTF-8"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-20T17:54:49Z",
        "uuid": "b0bf61fd-39a5-4742-8913-815b9f6cb019",
        "scanned_at": "2026-10-20T14:22:17Z",
        "final_url": "https://clinicadeolhosuchoa.com.br/",
        "status": 200,
        "history": [
            {
                "url": "https://clinicadeolhosuchoa.com.br/",
                "status": 200
            }
        ],
        "dom_hash": "a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e",
        "domain_risks": [
            "Parked & For Sale Domains",
            "Security Risks"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "clinicadeolhosuchoa.com.br",
                "type": "A",
                "value": "108.179.193.28"
            }
        ],
        "dnssec_valid": false,
        "ip": "108.179.193.28",
        "whois": {
            "created": "2016-03-28T00:00:00Z",
            "updated": "2026-03-16T00:00:00Z",
            "expires": "2027-03-28T00:00:00Z",
            "nameservers": [
                "ns698.hostgator.com.br",
                "ns699.hostgator.com.br"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-20T18:04:37Z",
        "analysis_at": "2026-10-20T17:07:35Z",
        "stats": {
            "timeout": 0,
            "harmless": 46,
            "malicious": 9,
            "suspicious": 5,
            "undetected": 32
        },
        "detections": {
            "ESET": "suspicious",
            "VIPRE": "malware",
            "Abusix": "spam",
            "G-Data": "phishing",
            "Lionic": "phishing",
            "Sophos": "phishing",
            "Certego": "spam",
            "Webroot": "malicious",
            "Fortinet": "phishing",
            "SOCRadar": "malicious",
            "Gridinsoft": "suspicious",
            "BitDefender": "phishing",
            "alphaMountain.ai": "phishing",
            "Forcepoint ThreatSeeker": "suspicious"
        },
        "reputation": 0,
        "popularity": {
            "Cloudflare Radar": 1000000
        },
        "expires": "2027-03-28T00:00:00Z",
        "first_seen": "2024-05-05T09:17:53Z",
        "dns": [
            {
                "ttl": 21600,
                "type": "NS",
                "value": "ns699.hostgator.com.br"
            },
            {
                "ttl": 14400,
                "type": "MX",
                "value": "mail.clinicadeolhosuchoa.com.br",
                "priority": 0
            },
            {
                "ttl": 14400,
                "type": "A",
                "value": "108.179.193.28"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "ns698.hostgator.com.br"
            },
            {
                "ttl": 21600,
                "type": "SOA",
                "rname": "dnsadmin.br698.hostgator.com.br",
                "value": "ns698.hostgator.com.br"
            }
        ],
        "dns_at": "2026-10-20T17:07:59Z",
        "jarm": "29d29d15d29d29d00042d42d000000cd600c085f371f8533aaf66051f8e5b1",
        "cert": {
            "san": [
                "*.clinicadeolhosuchoa.com.br",
                "clinicadeolhosuchoa.com.br"
            ],
            "issuer": "Let's Encrypt / YR1",
            "serial": "62f9f7309a61b5c6dd1f1115751deccb0f3",
            "sha256": "e51a995bfe36d7ecbf1e64e2b324a2a51dbe5c57026f128c6d83aa7ee83c1c46",
            "subject": "*.clinicadeolhosuchoa.com.br",
            "valid_to": "2026-12-25T12:36:18Z",
            "valid_from": "2026-09-26T12:36:19Z"
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-21T02:05:54Z",
        "mail_config": {
            "mx": [
                "mail.clinicadeolhosuchoa.com.br"
            ],
            "dkim": [
                "default"
            ],
            "dkim_bits": 2048,
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "clinicadeolhosuchoa.com.br"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_count": 0
        },
        "archives": {
            "last": "2026-10-20T13:49:30Z",
            "first": "2021-11-29T12:37:29Z",
            "changes": 2,
            "days_archived": 11,
            "scans_per_day": 0.01,
            "avg_page_bytes": 748
        },
        "trackers": {
            "requests": 1
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 570,
                "tls": 204,
                "wait": 202,
                "connect": 198,
                "download": 0
            },
            "response_ms": 1174
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                21,
                22,
                25,
                53,
                80,
                110,
                143,
                443,
                587,
                993,
                995,
                3306
            ]
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "108.179.193.27",
                    "host": "ns699.hostgator.com.br"
                },
                {
                    "ip": "108.179.193.26",
                    "host": "ns698.hostgator.com.br"
                }
            ],
            "zone": "clinicadeolhosuchoa.com.br"
        },
        "location": {
            "ip": "108.179.193.28",
            "asn": "31898",
            "org": "WEBSITEWELCOME.COM",
            "city": "Vinhedo",
            "country": "BR"
        },
        "ssl": {
            "issuer": "Let's Encrypt / YR1",
            "subject": "*.clinicadeolhosuchoa.com.br"
        },
        "dns": {
            "A": [
                "108.179.193.28"
            ],
            "MX": [
                "{\"exchange\": \"mail.clinicadeolhosuchoa.com.br\", \"priority\": 0}"
            ],
            "NS": [
                "ns698.hostgator.com.br",
                "ns699.hostgator.com.br"
            ],
            "SOA": "{\"nsname\": \"ns698.hostgator.com.br\", \"hostmaster\": \"dnsadmin.br698.hostgator.com.br\", \"serial\": 2026092601, \"refresh\": 86400, \"retry\": 7200, \"expire\": 3600000, \"minttl\": 86400}"
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": false,
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "108.179.193.28",
            "family": 4
        },
        "redirects": {
            "chain": [
                "https://clinicadeolhosuchoa.com.br"
            ]
        },
        "rank": {
            "domain": "clinicadeolhosuchoa.com.br"
        },
        "tech_stack": {
            "technologies": [
                "Apache HTTP Server"
            ]
        },
        "whois": {
            "created": "2016-03-28T00:00:00Z",
            "updated": "2026-03-16T20:15:03Z",
            "expires": "2027-03-28T00:00:00Z",
            "status": [
                "published"
            ],
            "nameservers": [
                "ns698.hostgator.com.br",
                "ns699.hostgator.com.br"
            ]
        },
        "headers": {
            "headers": {
                "server": "Apache",
                "content-type": "text/html; charset=UTF-8"
            }
        }
    }
}
```