alstecacontabilidade[.]com[.]br

Analysis as of July 24, 2026 indicates that alstecacontabilidade.com.br is associated with a confirmed phishing operation. The domain resolves to IP 192.185.216.35, which is registered to AS19871 Network Solutions, LLC in the United States. The hosting server reports Apache HTTP Server and presents a Let’s Encrypt R12 certificate, confirming TLS is in place but does not mitigate the malicious intent. HTTP requests return status code 200, suggesting the site was serving content before being taken offline.

Reputation services assign extremely low scores: Gridinsoft rates the domain 0/100 and Scamadviser 1/100, reinforcing the elevated risk assessment. The domain appears on one security blocklist and has been explicitly blocked by the PhishDestroy filtering service. Threat intelligence aggregators record the domain in 21 AlienVault OTX pulses, and VirusTotal analysis shows that 16 of 95 scanned security vendors flagged the site, indicating observable malicious behavior. Registration data shows the domain was created on May 26, 2010, and its MX records point to mx1.evolutionweb.com.br (priority 1) and mx5.evolutionweb.com.br (priority 5), confirming active email infrastructure.

Nameservers are ns1.apoiomidia.com.br and ns2.apoiomidia.com.br. The current status is offline, but historical evidence suggests the site was used for credential harvesting. Defenders should continue to block the domain and its associated IP address, monitor the listed MX hosts for suspicious email traffic, and update intrusion detection signatures to reflect the observed indicators. Ongoing observation of the AS19871 network for related activity is recommended.