guiadosservicosauto[.]com

Analysis of guiadosservicosauto.com indicates that the domain is currently offline but retains several indicators of malicious activity. The site was registered on February 21, 2026 through NiceNIC International Group Co., Limited and is hosted behind Cloudflare’s network (ASN 13335) with the IP address 104.21.72.84 located in the United States. DNS resolution uses Cloudflare name servers emma.ns.cloudflare.com and isaac.ns.cloudflare.com, and the service is delivering HTTP/3 traffic. An SSL certificate issued by Google Trust Services (WE1) is present, confirming the use of a legitimate certificate chain.

The page title returned in the last successful request was "Inicio - ONNE CONSULTORIA", and the HTTP response code was 500, suggesting a server‑side error at the time of probing. Security‑vendor scanning on VirusTotal recorded three detections out of ninety‑three scanners, and the domain is listed on a single security blocklist. Independent reputation services have assigned a Gridinsoft trust score of 0 / 100, and the domain is actively blocked by the PhishDestroy mitigation platform. While the exact phishing payload or credential‑stealing page has not been captured, the combination of a low trust score, multiple vendor detections, and active blocklist inclusion supports an elevated risk classification.

Defenders should continue to block the domain at perimeter filters, update URL‑filtering rules to include the resolved IP address and associated Cloudflare name servers, and monitor for any re‑appearance of the domain or related subdomains. Given the use of a legitimate SSL certificate and reputable CDN, any future re‑hosting attempts may bypass simple certificate checks, so threat‑intel feeds should be refreshed regularly. Until the domain is definitively taken down, security operations should treat any traffic to guiadosservicosauto.com as hostile and isolate it from internal users.