portalgestaocentral[.]online

This domain, portalgestaocentral.online, is confirmed to operate as a credential harvesting phishing site targeting users through fraudulent login portals. Analysis indicates the infrastructure is designed to mimic legitimate enterprise resource management systems, likely aiming to capture corporate or financial account credentials. The domain presents itself as a central management portal, increasing the likelihood of successful social engineering against employees or customers of organizations using similar platforms. Infrastructure analysis reveals multiple high-confidence indicators of malicious activity. The domain was registered on June 28, 2026, through DYNADOT LLC, with an unusually future creation date suggesting potential domain spoofing or typo-squatting techniques. It currently resolves to IP address 69.49.241.79 and appears on one security blocklist. VirusTotal reports 12 out of 95 security vendors flagging the domain as malicious, while AlienVault OTX has recorded the domain in two distinct threat intelligence pulses. The combination of recent registration, active resolution, and multiple detection sources confirms the domain's role in ongoing phishing operations. Users who have visited portalgestaocentral.online or entered credentials on the site should immediately take corrective action. All passwords submitted through this domain must be changed across any other platforms where identical credentials were reused. Organizations should monitor for unauthorized access attempts using the compromised credentials and implement multi-factor authentication where available. Network administrators are advised to block both the domain and its resolving IP address (69.49.241.79) at the perimeter level. Any systems that accessed the domain should be scanned for malware, as phishing sites frequently deploy additional payloads or redirect to exploit kits.