fs[.]cpa-advogados[.]com

The domain fs.cpa-advogados.com has been identified as a generic phishing infrastructure impersonating legal or professional advisory services. Analysis confirms the domain is currently offline, though it previously exhibited characteristics consistent with credential harvesting or fraudulent client engagement attempts. No specific brand impersonation has been conclusively linked, but the naming convention suggests targeting of law firms or certified public accountants. Technical indicators reveal the domain was flagged by 17 of 95 security vendors on VirusTotal, with a Gridinsoft trust score of 0/100. It appears on one security blocklist and was registered through PDR Ltd. d/b/a PublicDomainRegistry.com. The domain resolves to the IP address 188.114.96.3, with detected technologies including jQuery, Cloudflare Browser Insights, Cloudflare, and HTTP/3. The SSL certificate is issued by Let's Encrypt, and the page title returned a 403 - Acesso negado (Access Denied) response, suggesting either takedown or defensive measures. Current status indicates the domain has been taken offline, though residual risk remains for organizations previously targeted. Defenders are advised to block the domain and associated IP at perimeter security controls, monitor for related subdomains or newly registered lookalike domains, and conduct internal log reviews for prior connections to 188.114.96.3. Email filtering systems should flag messages containing this domain or similar naming patterns. Given the low trust scores and vendor detections, this infrastructure should be treated as high-confidence malicious until further evidence emerges.