link[.]consultasaibaja[.]com[.]br

The domain link.consultasaibaja.com.br was identified as a generic phishing site posing an elevated risk. It did not impersonate a specific brand or deploy a known drainer kit but presented a login-themed page titled 'CredBrasil' designed to harvest user credentials. As of the latest verification, link.consultasaibaja.com.br has been taken offline.

Technical indicators confirm the phishing nature of link.consultasaibaja.com.br. The domain was flagged by 12 of 95 security vendors on VirusTotal, including ADMINUSLabs, BitDefender, and CyRadar, and appeared on 2 security blocklists (PhishDestroy and PhishingDB). Registered through Cloudflare, Inc. on December 27, 2024, it resolved to the IP address 188.114.96.3, hosted by Cloudflare in the US (AS13335). No SSL certificate was issued, and the observed page title was 'CredBrasil'. Gridinsoft assigned a trust score of 0/100 to the domain.

Users who interacted with link.consultasaibaja.com.br should immediately change any credentials entered on the site, particularly those related to financial or sensitive accounts. Enable two-factor authentication (2FA) on all critical services to mitigate further risk. Monitor accounts for unauthorized activity and report any suspected fraud to relevant financial institutions. To aid in tracking, victims may report the phishing domain to their email provider, local cybersecurity authorities, or platforms like Google Safe Browsing and PhishTank.