popart[.]com[.]br

Analysis indicates that popart.com.br is currently flagged as a high‑risk generic phishing site. The domain resolves to IP 162.214.126.26, which is registered to AS46606 Unified Layer in the United States. It uses a Let’s Encrypt R12 certificate and returns HTTP 200, suggesting the site is reachable. Infrastructure details show authoritative nameservers ns1.rvdof.com.br and ns2.rvdof.com.br, and the web server runs Apache with Bootstrap, jQuery and FancyBox components. Reputation data is poor: Gridinsoft assigns a trust score of 0 / 100, the domain appears on two public blocklists (PhishDestroy, PhishingDB), and AlienVault OTX lists it in fourteen threat‑intel pulses. VirusTotal reports fifteen of ninety‑three scanners flag the host, reinforcing the malicious assessment. The domain was registered on 02 August 2000, which does not itself mitigate the risk. At present, the exact phishing payload or targeted brand has not been disclosed; only the generic phishing classification and the page title “PopArt” are known. Defenders should block outbound connections to 162.214.126.26, add popart.com.br to deny‑list filters, and monitor DNS queries for the associated nameservers. Continuous re‑scanning is advised to detect any changes in payload or additional indicators of compromise.