clickpromosbr[.]com

PhishDestroy identifies clickpromosbr.com as a high-risk phishing domain actively distributing fake promotional offers to harvest sensitive user data. The domain leverages social engineering tactics, tricking visitors into believing they are engaging with legitimate promotional content, while secretly capturing entered credentials or personal information. Security researchers observed this domain resolving to IP 34.111.179.208, further confirming its malicious infrastructure.

This domain was flagged by 10 out of 95 VirusTotal security vendors, indicating a strong consensus on its malicious nature. Registered through Fewmoretaps OU d/b/a Trustname.com, the domain was created on March 13, 2026, and is currently blocked by InversionDNS due to its inclusion on 1 security blocklist. The presence of a Let’s Encrypt SSL certificate adds a false sense of legitimacy, but this does not mitigate the inherent risks associated with the domain’s activities. Google Safe Browsing has also classified this domain under the SOCIAL_ENGINEERING category, underscoring its use in deceptive practices.

Users who visited clickpromosbr.com should immediately cease any interaction and close the browser tab or window. If any credentials or personal information were entered, change all related passwords immediately and monitor accounts for suspicious activity. Run a full antivirus scan on your device to detect and remove any potential malware. Avoid accessing this domain in the future, and report the incident to your IT security team or relevant authorities if necessary. Exercise caution with unsolicited promotional offers, especially those received via email or unfamiliar websites.