portalclientesdigital[.]com

This domain is flagged as an elevated-risk credential theft phishing site designed to harvest user login credentials under the guise of PRIME COMERCIOS E SERVICOS LTDA. Analysis indicates the site employs social engineering tactics to deceive victims into submitting sensitive authentication details, which are then exfiltrated for unauthorized access to corporate or financial accounts. The threat type is highly targeted, leveraging brand impersonation to increase legitimacy and victim compliance. Infrastructure analysis reveals the domain portalclientesdigital.com was registered on February 23, 2026, through NiceNIC International Group Co., Limited, an uncommon creation date suggesting potential domain spoofing. The site resolves to IP address 188.114.96.3 and utilizes Cloudflare with HTTP/3, likely to obfuscate hosting origins and evade detection. Security vendor assessments on VirusTotal show 5 out of 95 engines flagging the domain as malicious, while Gridinsoft assigns a trust score of 0/100. The domain appears on one security blocklist and is currently blocked by PhishDestroy. The SSL certificate is issued by Google Trust Services, which may lend false credibility to the site. Mitigation steps for credential theft phishing include immediate blocking of the domain and associated IP (188.114.96.3) at the network perimeter. Organizations should deploy email filtering rules to quarantine messages containing portalclientesdigital.com or PRIME COMERCIOS E SERVICOS LTDA references. End-user training should emphasize verification of domain authenticity, particularly for login portals, and the risks of entering credentials on untrusted sites. Multi-factor authentication (MFA) should be enforced for all accounts to reduce the impact of credential compromise. Security teams are advised to monitor for unauthorized access attempts linked to credentials potentially harvested from this domain.