contafacilnu[.]online

This domain, contafacilnu.online, is identified as an active phishing infrastructure specifically designed to impersonate Bradesco, a major Brazilian financial institution. The threat type is classified as credential harvesting, targeting users through fraudulent login portals that mimic legitimate banking interfaces. As of the latest analysis, the domain remains operational and poses an elevated risk to individuals accessing financial services online. Infrastructure analysis reveals the following technical indicators: contafacilnu.online was registered on June 25, 2026, through NicNames, Inc, a registrar frequently associated with high-risk domains. The domain resolves to the IP address 69.49.241.79, which has been linked to other phishing campaigns in recent months. Security vendor assessments on VirusTotal indicate that 4 out of 95 engines flag the domain as malicious, a relatively low detection rate that suggests the infrastructure may still be evading widespread automated detection. The SSL certificate is issued by Let's Encrypt, a common choice for phishing sites due to its free and automated issuance process, which does not require rigorous validation of the domain owner's legitimacy. Current status confirms that contafacilnu.online remains active and continues to host phishing content. Users are strongly advised to avoid interacting with the domain or entering any credentials on its associated pages. Financial institutions and security teams should update blocklists to include this domain and its resolving IP address. Individuals who may have accessed the site should immediately change their banking credentials and enable multi-factor authentication where available. Monitoring for unusual account activity is recommended, as compromised credentials may be used in subsequent fraudulent transactions or sold on underground forums.