faciliteanalise[.]com

This domain, faciliteanalise.com, operates as a credential harvesting portal designed to mimic legitimate Brazilian financial or service platforms under the guise of a 'Simulação' (simulation) interface. Analysis of the page structure and metadata indicates it is engineered to deceive users into submitting sensitive login credentials, likely for subsequent account takeover or fraudulent transactions. The use of localized language and branding elements suggests a targeted campaign against Portuguese-speaking users, increasing the likelihood of successful social engineering. Infrastructure analysis reveals multiple high-confidence indicators of malicious activity. The domain was registered on September 04, 2025, through Internet Domain Service BS Corp, a registrar frequently associated with phishing operations. It resolves to the IP address 104.21.91.84, hosted on Cloudflare’s network (AS13335), which is commonly exploited to obfuscate origin servers. Detection metrics further validate the threat: 14 out of 95 security vendors on VirusTotal flagged the domain as malicious, while it appears on two independent security blocklists. The SSL certificate, issued by Let’s Encrypt (R13), provides minimal assurance, as it is routinely abused in phishing campaigns to lend a false sense of legitimacy. Users who visited faciliteanalise.com or interacted with its content should assume their credentials were compromised. Immediate action is required: revoke any entered passwords, enable multi-factor authentication on associated accounts, and monitor for unauthorized transactions. Browser-based password managers should be audited for stored credentials linked to this domain. Given the elevated risk level, affected individuals should also consider reporting the incident to relevant financial institutions or cybersecurity response teams. The domain’s current offline status does not preclude future reactivation; thus, continued vigilance is advised.