acesso[.]netempresa[.]tel

PhishDestroy identifies acesso.netempresa.tel as a High-risk crypto drainer domain impersonating business services. The domain leverages social engineering tactics to trick users into authorizing malicious wallet transactions. No known drainer kit signature was reported by VirusTotal at time of analysis, suggesting a custom or newly deployed variant targeting Portuguese-speaking business users.

This domain was flagged with 13/95 VirusTotal detection ratio, registered through TUCOWS.COM, CO., resolving to IP 80.78.30.11. Domain creation date was March 06, 2026, and Google Safe Browsing classifies it under SOCIAL_ENGINEERING. No additional blocklist count was provided; however, the domain’s SSL certificate issued by Let’s Encrypt enables encrypted malicious traffic, increasing stealth and evasion potential.

The domain remains actively resolving and serving malicious content as of the latest scan. Users are advised to immediately block access via DNS, firewall, or endpoint protection. Financial organizations, especially in Brazil or Portugal, should deploy behavioral monitoring for drainer signatures and warn customers against interacting with netempresa.tel subdomains. Remaining risk remains HIGH due to recent creation date, low VT coverage, and active SSL usage. Ongoing monitoring and takedown engagement are strongly recommended.