lvgseguranca[.]com[.]br

Analysis shows that lvgseguranca.com.br resolves to 162.241.3.25, hosted on an Apache server running WordPress with MySQL and PHP backend and exposing Google Analytics scripts. The domain is registered through UNIFIEDLAYER-NETWORK-16 (ASN 19871) and uses a Let\'s Encrypt R12 certificate. Both ns1.hpmdigital.com and ns2.hpmdigital.com serve as authoritative name servers. The site returns HTTP 200 and is listed on PhishDestroy and PhishingDB blocklists; AlienVault OTX references it in 17 threat pulses, and 16 of 95 VirusTotal scanners have flagged it. Gridinsoft assigns a trust score of 0/100, indicating extreme suspicion. The infrastructure suggests a deliberately crafted phishing site, but the specific target or credential‑stealing vector has not been disclosed. Defenders should block traffic to 162.241.3.25, add lvgseguranca.com.br to URL filtering policies, monitor for related WordPress exploit attempts, and investigate any inbound connections from the listed name servers. Continuous threat‑intel correlation is advised to capture any emerging indicators tied to this domain.