372656135051488813789482033989mjrfadimxatvapj[.]adelon[.]com[.]br

The domain 372656135051488813789482033989mjrfadimxatvapj.adelon.com.br is flagged as an active high‑risk brand‑impersonation site targeting Microsoft. Infrastructure analysis shows the domain was registered on 24 September 2024 and is hosted through the HGBLOCK-4 registration block (ASN 19871). DNS resolves to IP 108.167.132.147, which is located in the United States and is owned by Network Solutions, LLC. The web server is Apache HTTP Server, and the site presents a valid Let’s Encrypt R13 TLS certificate. The page title returned by HTTP 200 is “Outlook”, matching the Microsoft brand target. The domain appears on two public blocklists (PhishDestroy, PhishingDB) and 13 of 95 VirusTotal scanners have raised detections, giving it a Gridinsoft trust score of 0/100 and a Scamadviser score of 1/100. Nameservers ns234.prodns.com.br and ns235.prodns.com.br are in use. The listed scam type is a tech‑support scam, although the exact payload or credential‑capture mechanisms have not been observed. Evidence beyond the page title and infrastructure is unavailable, so the precise user‑facing content remains uncertain. Defenders should block the domain and its resolving IP at perimeter firewalls and proxy filters, add the domain to internal threat‑intel feeds, and monitor for any outbound connections to the host. Continuous re‑evaluation is advised as additional indicators may surface.