dibebedouro[.]org[.]br

This domain, dibebedouro.org.br, is identified as a high-risk credential harvesting and social engineering phishing site. Analysis indicates it impersonates the legitimate Distrito de Irrigação do Perímetro Irrigado de Bebedouro, a Brazilian irrigation district, to deceive visitors into submitting sensitive information. The domain is currently offline, but prior activity suggests it was actively used for malicious purposes. Infrastructure analysis reveals multiple technical indicators of compromise. The domain was flagged by 14 of 95 security vendors on VirusTotal, with Google Safe Browsing specifically labeling it as SOCIAL_ENGINEERING. It appears on two security blocklists, including PhishDestroy and InversionDNS. The domain resolves to the IP address 201.87.225.41 and was registered on March 30, 2026, an anomalous creation date likely intended to evade detection. Trust scores from Gridinsoft and Scamadviser are 0/100 and 1/100, respectively. The site employed WordPress, MySQL, PHP, Apache HTTP Server, and front-end libraries such as jQuery and Swiper, which are commonly exploited in phishing campaigns due to their widespread use and known vulnerabilities. The current status of dibebedouro.org.br is offline, but the infrastructure remains a latent threat. Organizations and individuals are advised to block the domain and its associated IP (201.87.225.41) at the network level. Users who may have interacted with the site should immediately reset credentials, particularly for accounts related to financial, administrative, or operational systems associated with irrigation districts or agricultural entities. Monitoring for unauthorized access or anomalous activity is recommended, as phishing campaigns often precede further compromise. Security teams should review logs for connections to the IP and domain, and consider implementing additional authentication controls for sensitive systems.