couchepubli[.]com

This domain, couchepubli.com, poses as a legitimate business acceleration service under the name "Couchê Publi | Força C: Acelerando seu negócio" to conduct generic phishing operations. The infrastructure targets individuals or organizations seeking business growth solutions, likely harvesting credentials, financial details, or deploying malware under the guise of professional services. The page title and branding elements suggest an attempt to mimic a trusted advisory or consulting platform, increasing the likelihood of successful social engineering attacks against Portuguese-speaking targets. Analysis indicates couchepubli.com was registered on March 09, 2020, through GoDaddy.com, LLC and resolves to the IP address 192.185.223.229. The domain is flagged by 10 out of 95 security vendors on VirusTotal, appears on 2 security blocklists, and is documented in 18 threat intelligence pulses on AlienVault OTX. The site employed a Let's Encrypt SSL certificate and utilized WordPress, MySQL, PHP, and Apache HTTP Server, alongside plugins such as All in One SEO, Swiper, Slider Revolution, and reCAPTCHA to enhance legitimacy. Trust scores from Gridinsoft and Scamadviser are 0/100 and 1/100, respectively, further corroborating its malicious classification. Users who visited couchepubli.com should immediately revoke any credentials entered on the site, particularly if reused across other platforms. Monitor financial statements for unauthorized transactions and scan local devices for malware, as the domain may have hosted drive-by download payloads. Report the incident to relevant cybersecurity teams or national computer emergency response teams (CERTs) for further investigation. Given the domain's current offline status, verify any communications claiming to originate from "Couchê Publi" or similar branding through independent, verified channels before engaging.