diegomarthin[.]com[.]br

Analysis of diegomarthin.com.br indicates an active phishing domain with a high-risk classification due to confirmed social engineering activity. The domain was registered on April 29, 2019, and remains operational as of July 18, 2026, resolving to the IP address 162.241.203.111. Infrastructure analysis reveals nameservers ns1.deaagencia.com.br and ns2.deaagencia.com.br, which may be part of a broader hosting pattern associated with malicious domains. Threat intelligence platforms have flagged this domain in two distinct pulses, while detection engines classify it under the SOCIAL_ENGINEERING category, confirming its use in deceptive campaigns. Security vendor assessments on this domain yield a detection rate of 14 out of 95, suggesting moderate consensus on its malicious nature. The exact content or targeted brand of the phishing site has not been analyzed, but the domain’s classification as generic_phishing aligns with its use in broad social engineering schemes. Defenders should treat this domain as hostile and prioritize blocking or monitoring traffic to and from 162.241.203.111, particularly in environments where user credentials or sensitive information are handled. Further investigation into the hosting provider and associated domains under the same nameservers may reveal additional compromised infrastructure. No evidence currently links this domain to a specific phishing kit or targeted organization, leaving its precise operational scope uncertain.