portalcorreios[.]pagamentodeimportacoes[.]com[.]br

This domain, portalcorreios.pagamentodeimportacoes.com.br, is currently classified as a generic phishing site with an elevated risk rating. The registration record shows it was created on 11 June 2026 and the registrar is GoDaddy. Infrastructure analysis reveals that the domain resolves to the IP address 172.67.145.53, which is associated with a cloud hosting provider commonly used by malicious actors.

The domain appears on one security blocklist and is actively blocked by the PhishDestroy filtering service. VirusTotal scans indicate that six of ninety‑one security vendors have flagged the domain as malicious, reinforcing the suspicion of phishing activity. The limited blocklist presence suggests that broader community awareness may still be developing.

Defenders should add the domain to internal block or deny lists, monitor DNS queries for the associated IP, and consider extending threat‑intel feeds to include the observed blocklist entry. Because the domain is newly created, additional reconnaissance such as TLS certificate inspection, HTTP response analysis, and content retrieval should be performed to confirm the payload and to detect any credential‑harvesting endpoints. Until further evidence is gathered, the domain should be treated as hostile and any traffic to or from it should be denied or sandboxed.