goatlas[.]com[.]br

The domain goatlas.com.br is identified as a generic phishing site designed to mimic a legitimate WordPress blog. Analysis indicates the threat type as a fraudulent login or credential harvesting scheme, though no specific brand impersonation has been confirmed. The domain is currently offline, but prior activity suggests it was actively targeting users through deceptive content. Infrastructure analysis reveals the domain was registered through GoDaddy.com LLC and resolves to the IP address 107.180.117.214. It is flagged by 6 of 95 security vendors on VirusTotal and appears on one security blocklist, specifically PhishDestroy. The domain is also referenced in two threat intelligence pulses on AlienVault OTX. Detected technologies include WordPress, MySQL, PHP, and Apache HTTP Server, which are consistent with a typical WordPress deployment but leveraged for malicious purposes. The Gridinsoft trust score for this domain is 0 out of 100, indicating a high level of risk. Current status confirms the domain has been taken offline, likely due to enforcement actions or hosting provider intervention. However, the infrastructure and registration details remain a concern. Organizations and individuals are advised to block the domain and associated IP address at the network level. Monitoring for similar WordPress-based phishing domains registered through the same registrar or resolving to the same IP range is recommended. Users should verify the legitimacy of WordPress sites before entering credentials or sensitive information, as generic blog templates are frequently exploited for phishing.