informacaotransparente[.]com

PhishDestroy identifies informacaotransparente.com as an active phishing domain designed to impersonate legitimate transparency portals. The site lures users by suggesting it provides public information access, while its true purpose is to harvest credentials or deliver malware under the guise of transparency. This tactic exploits trust in official-sounding domains to deceive visitors into entering sensitive data or downloading malicious content. The campaign is currently under investigation, meaning its full infrastructure and objectives are still being mapped. This domain was flagged after PhishDestroy detected zero detections out of 95 VirusTotal scans, indicating it has not yet been widely recognized by antivirus engines. The domain was registered on August 24, 2025, just days ago, and resolves to IP address 104.21.17.28. It uses a Google Trust Services SSL certificate to appear legitimate, but was registered through Fewmoretaps OU (d/b/a Trustname.com), a registrar often associated with low oversight and higher abuse potential. These technical indicators suggest a newly launched, opportunistic campaign likely targeting Portuguese-speaking users seeking government-related information. If you visited informacaotransparente.com, do not enter any personal or login information. Close the browser immediately and run a full antivirus scan. Avoid clicking links from unsolicited emails or ads referencing this domain. Report the site to your IT team or use PhishDestroy’s reporting tool. Monitor financial and account activity closely for signs of compromise. Stay alert to similar domains using keywords like 'transparente' or 'informacao' in Portuguese contexts.