913789161621147280198065376576ipjpsvqgzrmxyey[.]adelon[.]com[.]br

The domain 913789161621147280198065376576ipjpsvqgzrmxyey.adelon.com.br has been identified as an elevated-risk threat involved in brand impersonation. Specifically, this domain impersonates the Outlook brand, likely to deceive users into divulging sensitive information such as login credentials or financial details. Analysis indicates that the domain does not appear to be associated with any known crypto drainer kits.

Infrastructure analysis reveals that the domain 913789161621147280198065376576ipjpsvqgzrmxyey.adelon.com.br is flagged by 17 out of 95 security vendors on VirusTotal. It is registered through HGBLOCK-4 (ASN: 19871) and resolves to the IP address 108.167.132.147, which is located in the United States under the AS19871 Network Solutions, LLC. The domain was created on September 24, 2024, and has been observed on two security blocklists: PhishDestroy and PhishingDB. The SSL certificate is issued by Let's Encrypt, a common provider for free certificates, which can sometimes be used by threat actors to gain user trust. The Google Safe Browsing (GSB) status for this domain is currently not available, but it is evident from the blocklists and VirusTotal detections that the domain poses a significant threat.

The current status of the domain 913789161621147280198065376576ipjpsvqgzrmxyey.adelon.com.br is offline, indicating that it has been taken down or is no longer active. However, given the rapid nature of phishing campaigns, there is a possibility that the domain could be reactivated or reused in the future. Security teams are advised to monitor for any renewed activity and to ensure that network defenses are updated to block this domain. User education on recognizing phishing attempts, verifying URLs, and using multi-factor authentication remains crucial in mitigating the risk associated with brand impersonation attacks.