atendimento-itau-0800[.]com[.]br

This domain, atendimento-itau-0800.com.br, is identified as a brand impersonation phishing site targeting customers of Itaú, a prominent Brazilian financial institution. The site attempts to deceive users by mimicking legitimate Itaú pages, often used to steal sensitive information such as login credentials and personal data.

Analysis of the domain reveals that it is flagged by 22 out of 95 security vendors on VirusTotal, indicating a moderate level of recognition among security communities. The domain was registered on February 21, 2026, and resolves to the IP address 185.199.108.153, which is located in the United States and is part of the AS54113 Fastly, Inc. network. The SSL certificate used is R13, which does not provide any additional trust or validation. The domain is currently listed in 2 security blocklists, including PhishDestroy and PhishingDB, further confirming its malicious nature.

The domain is currently offline, and appropriate response actions have been taken to mitigate the threat. Despite its offline status, the risk remains elevated as the domain could be reactivated. Users are advised to remain vigilant and verify the authenticity of any communication or website purporting to be from Itaú. Security teams should continue to monitor for any signs of re-emergence and ensure that necessary precautions, such as updating blocklists and educating users, are in place.