cargofretebrasil[.]com[.]br

Analysis of the domain cargofretebrasil.com.br indicates active phishing infrastructure targeting freight and logistics operations. The domain was registered on June 18, 2026, and remains operational as of July 12, 2026. It resolves to the IP address 200.160.2.95 and uses a Let's Encrypt SSL certificate, a common choice for both legitimate and malicious sites. The domain has been flagged by 2 security blocklists and appears in 14 threat intelligence pulses on AlienVault OTX, suggesting broader detection within the security community. Four out of 95 security vendors on VirusTotal have identified this domain as malicious, though the specific nature of the threat—beyond its classification as generic phishing—remains unverified through direct page analysis. The page title, 'cargofretebrasil.com.br,' does not explicitly confirm impersonation of a specific brand, but the domain name suggests an attempt to mimic freight or cargo logistics services. No evidence of a known phishing kit or additional infrastructure details (e.g., ASN, hosting provider) is currently available. Defenders should treat this domain as high-risk due to its recent registration, presence on multiple blocklists, and consistent detection across threat intelligence platforms. Network-level blocking is recommended, and further investigation into associated IP addresses and SSL certificate reuse may reveal additional malicious infrastructure. The exact content or payload delivered by this domain has not been analyzed, so monitoring for connections to this domain should be prioritized to assess potential compromise or credential harvesting activity.