radiocruzdemalta[.]com[.]br

Analysis of radiocruzdemalta.com.br indicates an active brand‑impersonation campaign targeting WhatsApp. The site returns HTTP 200 and presents a WordPress installation (PHP, MySQL, Apache) with plugins such as Slider Revolution and Select2. It is secured with a Let's Encrypt R13 certificate and resolves to IP 108.179.192.59, hosted in the United States under AS19871 (Network Solutions, LLC). DNS records show Google Workspace MX (aspmx.l.google.com) and authoritative nameservers ns816.hostgator.com.br and ns817.hostgator.com.br. The domain, created on 21 August 2005, appears on two security blocklists and has been cited in 15 AlienVault OTX pulses. VirusTotal reports 11 of 95 vendors flagging the domain, and Gridinsoft assigns a trust score of 0 / 100. The page title "Rádio Cruz de Malta – Informação com Responsabilidade" is the only visible content; no further page analysis is available. Defenders should treat the domain as malicious, block network connections to the IP and domain, add it to internal deny lists, and monitor for similar WordPress‑based impersonation sites that use the same hosting infrastructure or certificate provider. Continuous threat‑intel feeds should be consulted for updates, given the domain’s presence on multiple blocklists and its inclusion in recent OTX pulses.