atendimentoonlineauto[.]com

The domain atendimentoonlineauto.com was registered on February 22, 2026 through NiceNIC International Group Co., Limited and is hosted on Cloudflare infrastructure (AS13335) with the IP address 188.114.96.3 located in the United States. The domain resolves to two Cloudflare nameservers, brenna.ns.cloudflare.com and earl.ns.cloudflare.com, and does not present an SSL/TLS certificate, indicating that HTTPS connections are not available. The site’s page title, "Sua Agência | Marketing Digital que gera resultado," does not reference the targeted brand, but the domain is explicitly listed as impersonating the Linea brand.

VirusTotal analysis shows that three of ninety‑five security vendors flagged the domain, and it appears on a single public blocklist, PhishDestroy, which has already taken the domain offline. Current status is offline, suggesting that the hosting provider or a takedown request has disrupted the site. Defenders should add atendimentoonlineauto.com to URL filtering rules and block the associated IP 188.114.96.3 at the network perimeter.

Monitoring of Cloudflare‑originating traffic for similar domain patterns is advised, as the attacker leveraged a reputable CDN to obscure the true hosting location. Continuous re‑scanning of the domain, especially if it reappears, will be necessary to capture any changes in detection scores. Organizations that use the Linea brand should educate users about the lack of HTTPS and the unexpected page title, and instruct them to verify legitimate Linea communications through official channels.