autoguiasesbr[.]weebly[.]com

PhishDestroy identifies the domain autoguiasesbr.weebly.com as an active crypto-drainer phishing site currently under investigation. This domain is suspected of impersonating a legitimate service to steal cryptocurrency assets via malicious wallet drainers. The threat remains active as analysts continue to assess its operational scope and impact.

This domain was flagged by 0 of 95 VirusTotal vendors, indicating a low detection rate despite its malicious intent. Registered through MarkMonitor, Inc., the domain resolves to IP 74.115.51.9 and was created on March 29, 2006. No current blocklist entries were detected, and the domain utilizes a Let's Encrypt SSL certificate to appear legitimate. Trust scores and additional reputation metrics remain unremarkable at this stage.

Given the active status and low detection rate, users are strongly advised to avoid interacting with this domain or any associated URLs. Verify the legitimacy of links using PhishDestroy's real-time scanning tools before proceeding. Organizations should consider blocking the domain and its IP in perimeter defenses. If exposure is suspected, monitor cryptocurrency wallets for unauthorized transactions and report findings to security teams immediately.