guiadoveiculobrasil[.]com

The domain guiadoveiculobrasil.com has been identified as a phishing site targeting users seeking vehicle-related services or guides. Analysis confirms this domain falls under the specific threat category of generic phishing, with no direct impersonation of a known brand but designed to deceive users through fraudulent vehicle information portals. The domain is currently offline, though prior activity indicates malicious intent. Technical indicators reveal the domain was created on February 22, 2026, and is registered through NiceNIC International Group Co., Limited. It resolves to the IP address 104.21.8.5 and is protected by Cloudflare infrastructure, utilizing HTTP/3 and an SSL certificate issued by Google Trust Services. Detection metrics show the domain was flagged by 6 of 95 security vendors on VirusTotal, while Gridinsoft assigned a trust score of 0 out of 100. The domain appears on one security blocklist, further corroborating its malicious classification. Current status indicates the domain has been taken offline, likely due to enforcement actions or hosting provider intervention. However, the infrastructure and registration details suggest potential for reemergence under similar or altered domains. Organizations and users are advised to block the domain and its resolving IP at the network level. Security teams should monitor for newly registered domains with similar naming patterns or registrant details. End-users should verify the legitimacy of vehicle-related websites through official sources and report suspicious domains to relevant threat intelligence platforms.