projetosmecanicos[.]com[.]br

The domain projetosmecanicos.com.br is currently classified as a high‑risk generic phishing site. The public page presents the title “MDO Projetos”, which is unrelated to any known legitimate brand and is consistent with a typical lure used to harvest credentials. The domain remains active as of 12 July 2026 and returns an HTTP 301 redirect, indicating that the malicious landing page is still reachable. Infrastructure analysis shows the domain resolves to IP address 177.73.233.244, hosted in Brazil and associated with AS53038 IDC19 SOLUCOES EM TECNOLOGIA DA INFORMACAO LTDA. The authoritative nameservers are ns1.projetosmecanicos.com.br and ns2.projetosmecanicos.com.br, both hosted on the same domain, which suggests a self‑managed DNS configuration. The site presents a valid Let's Encrypt certificate issued by the YR2 authority, allowing encrypted communication without raising certificate warnings. Threat intelligence sources corroborate the malicious nature of the domain. It appears on one public blocklist and is listed by PhishDestroy as a blocked entry. AlienVault OTX contains four pulses referencing the domain, and VirusTotal reports that ten out of ninety‑five scanners have flagged it as malicious. Additionally, Gridinsoft assigns a trust score of 0 out of 100, reinforcing the assessment of a compromised site. Defenders should treat projetosmecanicos.com.br as a confirmed phishing vector and enforce blocking at perimeter and DNS layers. Automated sinksink or URL filtering can prevent end‑users from reaching the landing page, while threat‑intel feeds should be updated to include the domain and its associated IP address. Uncertainty remains regarding the specific credential sets or third‑party services targeted, so continuous monitoring of traffic to the IP and rapid analysis of any harvested data are advised.