macarraoeucalipto[.]com[.]br

Analysis of macarraoeucalipto.com.br indicates an active credential‑phishing infrastructure. The domain was registered on 21 February 2026 and currently resolves to 177.153.209.199, an address owned by AS27715 Locaweb Serviços de Internet S/A in Brazil. TLS is provided by a Let’s Encrypt R12 certificate, and the web server header identifies Apache HTTP Server. Google Safe Browsing classifies the site under the SOCIAL_ENGINEERING category. VirusTotal reports 21 of 93 scanners flagging the domain, and AlienVault OTX lists it in 14 threat‑intel pulses. The domain is listed on two public blocklists and has been blocked by PhishDestroy and PhishingDB. MX records show a priority‑10 entry pointing to mx.a.cronos-painel.com; additional MX data is truncated, preventing full verification of mail routing. The page title returned is “403 Forbidden” while the HTTP response code is reported as 200, suggesting a possible server‑side redirect or error handling. Gridinsoft assigns a trust score of 0 / 100. The overall risk is high, and defenders should block the domain at network perimeters, monitor DNS queries for the associated IP and nameservers (ns1‑3.cronos-painel.com), and consider adding the domain to URL filtering and email security policies. Continuous re‑scanning is advised to capture any changes in payload or hosting.