iperplano[.]pt

iperplano.pt, a domain flagged by 7 out of 92 vendors on VirusTotal, was engaged in phishing activities targeting Portuguese users. Despite its relatively low detection rate, the domain has been taken offline, mitigating immediate risks. It was listed on one public blocklist, specifically PhishDestroy's, indicating targeted monitoring and response.

The domain's hosting IP, 130.185.87.66, is located in Portugal and operated by ALMOUROLTEC - Lda. This local hosting choice suggests an attempt to appear legitimate to Portuguese users. The SSL certificate was issued by Let's Encrypt, a common choice for both legitimate and malicious sites due to its ease of access and automation.

The page title "Iperplano SA" might have been used to impersonate a legitimate business, adding a layer of credibility to the phishing operation. However, the domain has been successfully taken down, reducing its threat level. The swift action and inclusion in PhishDestroy's blocklist highlight the importance of proactive threat intelligence and rapid response to emerging phishing threats.