guiaveiculobr[.]com

Analysis as of July 22 2026 indicates that the domain guiaveiculobr.com was registered on February 21 2026 through NiceNIC International Group Co., Limited and currently resolves to the Cloudflare‑owned address 172.67.194.18 (AS13335, United States). The site presents the page title “ASSOCIADOS VEICULOS” and serves an SSL certificate issued by Google Trust Services under the WE1 designation, confirming the use of valid TLS. HTTP probing returns a 500 server error, and the infrastructure is identified as running Cloudflare Browser Insights, Cloudflare services, and HTTP/3. VirusTotal has recorded three positive detections out of ninety‑three scanned vendors, and the domain appears on a single public blocklist maintained by PhishDestroy.

Gridinsoft assigns a trust score of zero out of one hundred, reflecting a high confidence of malicious intent. The domain is classified as an investment scam, although the specific campaign payload or targeted victims have not been publicly disclosed. The site is presently offline, which may indicate takedown or temporary suspension.

Defenders should continue to block traffic to guiaveiculobr.com at the network perimeter, update URL filtering lists with the current blocklist entry, and monitor for any resurgence of the domain or its associated IP address. Because the domain leverages Cloudflare’s shared hosting, additional malicious activity could be hosted on the same IP range, so broader IP reputation checks are advisable. Ongoing vigilance is recommended, particularly for users who may have received recent communications referencing “ASSOCIADOS VEICULOS” or investment opportunities, as the threat actor may reuse the same branding in future campaigns.