Phishing domain cloning Caixa bank portal - gerenciadorcaixa.digital naming pattern

Arnold Chan@slaz

•updated Sep 9, 2026•0•0•4

Detects DNS queries and TLS SNI traffic directed towards known phishing domains that mimic Brazilian financial and government portals, specifically targeting 'gerenciadorcaixa.digital', 'aapj.digital', and 'receitafederal.digital'.