imagorad[.]com[.]br

The domain imagorad.com.br is identified as a generic phishing site specifically targeting users of the MAFIATOTO gambling platform. Analysis of the page title, 'MAFIATOTO : What Imagorad yang Wajib Dipahami dari Situs Toto Macau 5D Resmi,' confirms an attempt to impersonate legitimate MAFIATOTO services, likely to harvest credentials or financial information. Currently, the domain is offline, but prior activity and infrastructure indicators suggest malicious intent. Infrastructure analysis reveals multiple high-risk indicators. The domain is flagged by 4 of 95 security vendors on VirusTotal, while Gridinsoft assigns a trust score of 0 out of 100. It resolves to the IP address 2.24.87.49 and appears in two AlienVault OTX threat intelligence pulses. The domain was registered on November 25, 2013, but recent activity aligns with phishing campaigns. It is blocked by PhishDestroy and OISD and appears on two security blocklists. The SSL certificate, issued by Let's Encrypt, does not mitigate the risk due to the domain's fraudulent use. Given the elevated risk level and confirmed phishing activity, users are strongly advised to avoid interaction with imagorad.com.br. Organizations should update security controls to block the domain and associated IP address. Individuals who may have visited the site should monitor accounts for unauthorized activity and consider resetting credentials for any services accessed during the exposure window. Ongoing monitoring of related infrastructure is recommended to prevent further exploitation.