cadastro-rural[.]com

This domain, cadastro-rural.com, is actively operating as a phishing portal specifically targeting users of the CCIR (Certificado do Cadastro de Imóvel Rural) system. Analysis confirms the site is impersonating official rural property registration portals to harvest credentials and sensitive land ownership data. The portal remains live and accessible as of the latest verification. Infrastructure analysis reveals multiple high-risk indicators. The domain was registered on June 23, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with fraudulent registrations. It resolves to the IP address 104.21.44.175, which is part of a content delivery network known to obscure malicious infrastructure. The SSL certificate is issued by Google Trust Services, providing a false sense of legitimacy. Detection metrics show the domain is flagged by 1 of 95 security vendors on VirusTotal, a low but concerning signal given the domain's recent creation and targeted nature. Current status indicates the phishing portal remains active and unblocked by major security platforms. Organizations and individuals are advised to immediately block access to cadastro-rural.com at the network level and implement DNS-based filtering to prevent user interaction. Users who may have entered credentials on this portal should initiate password resets on legitimate CCIR systems and monitor accounts for unauthorized access. Domain registrars and hosting providers are urged to review the infrastructure for policy violations and suspend services to mitigate further risk.