rastreamento[.]menudoimportador[.]com[.]br

Analysis of the domain rastreamento.menudoimportador.com.br indicates that it was registered on June 12, 2026 via the GoDaddy registrar. The domain resolves to the IP address 172.67.145.10, which is hosted on a cloud service provider commonly used by legitimate sites, making passive network reputation less discriminating. The domain appears on a single security blocklist and is specifically flagged by the PhishDestroy blocklist, confirming its inclusion in active phishing mitigation feeds. VirusTotal has processed the domain and 4 out of 91 scanned security vendors have reported it as malicious, reinforcing the suspicion of malicious intent.

The threat type is classified as generic phishing, and the risk level is elevated with an active status as of the report date, July 29, 2026. Evidence gaps remain: no public Safe Browsing verdict, Open Threat Exchange (OTX) entries, SSL certificate details, HTTP response codes, or page title information have been disclosed. Consequently, the full extent of the hosting infrastructure, content served, and any credential‑ harvesting mechanisms cannot be confirmed at this time.

Defenders should add the domain to denylists across perimeter firewalls, DNS filtering, and email security gateways. Monitoring of outbound connections to the IP 172.67.145.10 is advisable, as is the implementation of proxy or sandbox analysis for any attempted user interaction with the URL. Given the registrar’s reputation and the presence on a known phishing blocklist, automated block actions are justified, while continued threat‑intel feeds should be consulted for any updates to detection counts or additional indicators of compromise.