atendimento24horas[.]click

PhishDestroy confirms that atendimento24horas.click is a credential theft scam site actively luring victims under the guise of 24/7 customer support. The domain mimics legitimate service portals to harvest login credentials, banking details, or payment card data. Threat actors leverage urgency and social engineering to trick users into entering sensitive information, which is then exfiltrated to attacker-controlled servers. Mitigation is critical to prevent account takeovers and financial loss.

This domain was flagged during real-time monitoring with an active status and under investigation risk level. Intelligence indicates 0 detections out of 95 on VirusTotal as of the latest scan, suggesting low signature detection despite malicious hosting behavior. The SSL certificate is issued by Let's Encrypt with a valid chain, resolving to IP 34.111.179.208. No historical blocklist entries were found in PhishDestroy’s threat intelligence feeds, and the domain’s creation date and registrar remain unverified at this stage. Trust scores from passive DNS and SSL observatories show no prior reputation, indicating a newly registered or hastily deployed threat infrastructure.

If you encounter this domain or have interacted with it, immediately cease any data entry and change passwords for affected accounts using a clean, isolated device. Report the site to your IT security team and file a complaint with relevant cybercrime units such as the FBI IC3 or local authorities. Organizations should block 34.111.179.208 at the firewall and monitor for outbound connections to known credential exfiltration endpoints. Users are advised to verify support portals directly via official channels and enable multi-factor authentication on all accounts. Report suspicious domains through PhishDestroy’s public portal or trusted threat-sharing platforms.