guiadocarroveicular[.]com

This domain, guiadocarroveicular.com, is flagged as an active phishing site impersonating an entity identified by the page title 'TOM CONSULTORIA.' Registered on February 21, 2026, through NiceNIC International Group Co., Limited, the domain currently resolves to the IP address 172.67.195.201, hosted on infrastructure belonging to AS13335 (Cloudflare, Inc.) in the United States. Analysis of the domain's nameservers (emma.ns.cloudflare.com and isaac.ns.cloudflare.com) confirms the use of Cloudflare services, a common tactic to obscure hosting origins and evade basic detection mechanisms. The site returns an HTTP 200 status, indicating active content delivery, and employs HTTP/3, a protocol often used to improve performance and evade certain network-based security controls. Security vendor detection remains limited but non-zero; three of ninety-three engines on a recent scan flagged the domain as malicious. The domain appears on at least one security blocklist and has been assigned a trust score of 0/100 by Gridinsoft. The SSL certificate is issued by Google Trust Services (WE1), a legitimate provider, which may lend superficial credibility to the site while not mitigating the underlying threat. Defenders should note that the domain's infrastructure, while not inherently malicious, is consistent with patterns observed in phishing campaigns: use of bulletproof registrars, Cloudflare proxying, and a recent registration date. At present, the exact nature of the phishing content remains unconfirmed due to the absence of deeper content analysis. However, the combination of a specific page title ('TOM CONSULTORIA'), a newly registered domain, and active malicious detections warrants immediate defensive action. Network defenders are advised to block the domain at the DNS or proxy level, monitor for connections to the associated IP (172.67.195.201), and investigate any internal systems that have interacted with this infrastructure.