lanches2000[.]com[.]br

The domain lanches2000.com.br is currently classified as a high‑risk generic phishing site and remains active as of the report date. Infrastructure analysis shows the domain resolves to IP address 212.28.188.55, which is hosted in the United States and belongs to AS40021 (Contabo Inc.). The authoritative name servers are ns1.ifantasy.com.br, ns2.ifantasy.com.br, ns3.srvif.com, and ns4.srvif.com, indicating use of third‑party DNS providers. The web server is identified as Apache HTTP Server and the site presents a valid SSL certificate issued by Let’s Encrypt (R12). The page title returned by the HTTP request is "Lanches 2000 – Melhor lanche da cidade," but no further content analysis is available. Reputation data is poor: Gridinsoft assigns a trust score of 1 / 100, and VirusTotal records 16 detections out of 95 scanned engines. AlienVault OTX lists the domain in fifteen threat‑intel pulses, and it appears on two public blocklists, including PhishDestroy and PhishingDB. Registration details indicate creation on 24 June 2020 via TT‑20241113, linked to ASN 40021. While the exact phishing payload or targeted brand is not disclosed, the combination of multiple detections, low trust score, and active blocklist listings confirms a significant threat. Defenders should block both the domain and its resolving IP at perimeter defenses, add the associated name servers to watch lists, and monitor network traffic for outbound connections to the IP range. Continuous updates to URL filtering and intrusion‑prevention signatures are recommended, alongside periodic re‑scanning to capture any changes in the site’s content or hosting infrastructure.