centralveiculosbrasil[.]com

centralveiculosbrasil.com was observed hosting a page titled “Wi‑Tech Despachante — Wi‑Tech Despachante : Online Car Support”. The domain was registered on 21 February 2026 through NiceNIC International Group Co., Limited and uses Cloudflare nameservers carmelo.ns.cloudflare.com and raina.ns.cloudflare.com. DNS resolution points to 172.67.196.203, an address owned by AS13335 Cloudflare, Inc. located in the United States. HTTPS is served with a Google Trust Services certificate issued to “WE1”, indicating a valid TLS configuration.

A technical fingerprint shows the site employed Bootstrap, jQuery and HTTP/3, all typical of modern web stacks. Threat intelligence indicates the domain appears on a single security blocklist and has a Gridinsoft trust score of 0 out of 100, the lowest possible rating. PhishDestroy has explicitly blocked the host and the current operational status is reported as offline, with an HTTP 500 response observed at the time of scanning. VirusTotal analysis shows that 2 of 93 scanned security vendors flagged the domain, confirming malicious perception by a minority of scanners.

The available data confirms that the domain is being used for a generic phishing campaign, though the exact payload or credential‑stealing mechanism has not been disclosed. Uncertainty remains regarding the specific victim demographic, the presence of malicious scripts, and whether any phishing emails have been distributed. Defenders should continue to block the domain at network perimeter and DNS layers, monitor for any sudden changes in its HTTP status, and correlate internal logs for connections to 172.67.196.203. Ongoing re‑evaluation is advised in case additional security vendors update their detection status.