mercadolivreoutlet[.]com

Analysis of mercadolivreoutlet.com shows it is actively serving HTTP content (status 200) and is listed on at least one security blocklist. The domain resolves to 15.197.148.33, an IP associated with Amazon Web Services Global Accelerator located in Canada. DNS resolution is provided by GoDaddy’s default name servers ns55.domaincontrol.com and ns56.domaincontrol.com. Registration records indicate the domain was created through GoDaddy.com, LLC, and the TLS certificate presented is a GoDaddy DV certificate issued by GoDaddy TLS Intermediate CA DV - R1v1. VirusTotal reports two detections out of ninety‑one scanners, confirming that security products have identified malicious activity linked to this host. PhishDestroy has already added the domain to its blocklist, and it appears on a separate blocklist as well. The evidence points to a generic phishing campaign, but the specific landing page content, targeted brand, or credential‑collection mechanism has not been publicly disclosed. Consequently, the precise scope of the campaign remains uncertain. Defenders should block the domain and its associated IP address at network perimeter devices, monitor DNS queries for the domain and its name servers, and consider adding the IP to threat‑intelligence feeds. Continuous re‑evaluation is advised in case additional indicators, such as payload samples or phishing kit fingerprints, become available.