# evo.tudopelastartup.com.br — SUSPICIOUS

> evo.tudopelastartup.com.br is linked to medium-risk phishing. Avoid interaction and verify sources before sharing data online.

## Summary
PhishDestroy identifies evo.tudopelastartup.com.br as a domain engaged in generic phishing activities. Classified under medium risk, this domain attempts to deceive users by mimicking legitimate sites to harvest sensitive information. The classification stems from behavioral patterns consistent with credential theft and fraudulent data collection.

Technical analysis shows the domain was registered recently on December 09, 2025, and resolves to IP address 72.62.141.12. The domain’s infrastructure lacks historical trust signals and correlates with known phishing tactics such as rapid registration and minimal hosting diversification. These indicators reinforce its malicious intent and increase the risk to unsuspecting users.

Currently, evo.tudopelastartup.com.br remains active, and PhishDestroy advises users to exercise caution and avoid engaging with this domain. Security teams are encouraged to monitor related network traffic and update filtering rules accordingly. Prompt user education and domain blacklisting are recommended to mitigate potential harm from this evolving phishing threat.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: alive (HTTP 200)

## Domain Intelligence
- Registered: 2025-12-09 00:00:00
- Registrar: REGISTRAR_NOT_FOUND
- IP: 72.62.141.12
- Nameservers: clayton.ns.cloudflare.com kelly.ns.cloudflare.com

## Detection Status
- VirusTotal: 3 vendors flagged
  Vendors: ["ChainPatrol", "SOCRadar", "alphaMountain.ai"]
- Google Safe Browsing: clean
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Live Page Content

### Page Text
{"status":200,"message":"Welcome to the Evolution API, it is working!","version":"2.1.2","clientName":"evolution_exchange","manager":"http://evo.tudopelastartup.com.br/manager","documentation":"https://doc.evolution-api.com"}

## Evidence
- Screenshot: https://i.ibb.co/VcQzzcFz/b7e690fbda76.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/98c05007-b622-4649-ac16-5f02ed5ab984
- PhishDestroy: https://phishdestroy.io/domain/evo.tudopelastartup.com.br/

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/evo.tudopelastartup.com.br/
Last updated: 2026-03-14