guiadecarrosbr[.]com

Analysis of the domain guiadecarrosbr.com indicates active phishing infrastructure targeting users under the guise of LAVIE SOLUCOES, as evidenced by the page title retrieved from the site. Registered on February 21, 2026, through NiceNIC International Group Co., Limited, the domain remains operational as of July 12, 2026, with no indication of takedown or remediation. Infrastructure analysis reveals the domain resolves to the IP address 172.67.175.157, a host that may be part of a broader content delivery or proxy network, though specific autonomous system details are not provided in available intelligence. The domain appears on two security blocklists and has been incorporated into 23 threat intelligence pulses within AlienVault OTX, suggesting recurring detection by multiple independent sources. A trust score of 0/100 from Gridinsoft further supports its classification as malicious. While three of 95 security vendors on VirusTotal flag the domain, the absence of additional context—such as the specific detection names or the nature of the phishing kit—limits further technical attribution. No evidence currently links the domain to a known phishing framework or targeted brand beyond the LAVIE SOLUCOES identifier in the page title. Defenders are advised to treat guiadecarrosbr.com as an active threat. Network-level blocking of the domain and its resolving IP is recommended, alongside monitoring for related indicators of compromise. Given the domain’s recent registration and persistent activity, continued vigilance is warranted, particularly for organizations or users associated with the identified page title. Further analysis of the site’s content and backend infrastructure may yield additional indicators, though such examination has not yet been conducted as part of this assessment.