magalu-achou-promo[.]shop

The domain magalu-achou-promo.shop is currently listed as an active generic phishing threat. Infrastructure analysis shows the domain is delegated to the parking name servers ns1.dns-parking.com and ns2.dns-parking.com, and resolves to the IPv4 address 45.152.44.155. The IP belongs to a hosting range commonly used for temporary or parked sites, which aligns with the observed use of DNS parking services.

The domain appears on a single security blocklist and is specifically blocked by the PhishDestroy filtering service, confirming that at least one reputable anti‑phishing feed has identified it as malicious. VirusTotal records indicate that the domain was scanned by 91 AV and URL‑reputation vendors, with no detections reported at the time of the scan; however, the absence of detections does not constitute evidence of safety. No additional intelligence such as Safe Browsing status, OTX mentions, registrar details, SSL certificate data, HTTP response codes, trust‑score metrics, or page‑title information is presently available.

Given the limited visibility into the payload or landing page, the precise phishing vector remains uncertain, but the combination of blocklist presence, DNS‑parking configuration, and the dedicated block by PhishDestroy justifies a high‑confidence classification as a phishing campaign. Defenders should immediately add magalu-achou-promo.shop to URL filtering and DNS block lists, monitor outbound traffic for connections to the associated IP, and continue periodic re‑scans with multi‑vendor services. Ongoing intelligence gathering, including request of TLS and HTTP response details, is recommended to refine detection rules and assess any evolution of the threat.