promovoosbrasil[.]com

PhishDestroy identifies promovoosbrasil.com as an active credential harvesting scam targeting Brazilian users under the guise of promotional offers. This domain was flagged for its suspicious registration patterns, low detection rate, and association with known fraudulent infrastructure. Users attempting to engage with supposed 'promotions' risk exposing login credentials, payment details, or personal data to threat actors. The site mimics legitimate Brazilian business promotions to deceive victims into entering sensitive information into fraudulent forms. This domain was registered on March 18, 2026, through Fewmoretaps OU d/b/a Trustname.com, a registrar with a history of enabling fraudulent domains. It resolves to IP address 216.150.1.1 and utilizes a Let's Encrypt SSL certificate to appear legitimate. Currently, promovoosbrasil.com shows 0 detections out of 95 VirusTotal scans, indicating it has not yet been widely flagged by security vendors. Despite its low detection rate, the domain’s creation date and registrar association raise significant red flags, as threat actors often exploit recently registered domains for phishing campaigns. The combination of a fresh domain, low detection rate, and fraudulent content suggests a high-risk threat actor operation in its early stages. Users who visited promovoosbrasil.com should immediately check their accounts for unauthorized activity, especially if any credentials or personal information were entered. Do not reuse passwords across different services, as compromised credentials could be exploited in broader attacks. If sensitive data was submitted, contact your bank or payment provider to report potential fraud and request account monitoring or card replacements. Report the domain to your local cybercrime unit or organizations like CERT.br to help disrupt these operations. Use updated antivirus software and browser security extensions to block future access to this domain. Avoid interacting with unsolicited promotional links, and verify offers directly through official channels before sharing any information.