pagamento[.]menudoimportador[.]com[.]br

The domain pagamento.menudoimportador.com.br was registered on June 12, 2026 through GoDaddy and currently resolves to the IP address 172.67.145.10, a range commonly associated with Cloudflare’s edge network. Within a week of its creation the domain appeared on a security blocklist and has been explicitly blocked by the PhishDestroy feed, indicating that threat‑intelligence sources have observed malicious use. VirusTotal reports that six of ninety‑one scanning engines flagged the domain, reinforcing the suspicion that it is being leveraged for abusive activity.

The risk level is classified as elevated and the status is active, meaning the infrastructure is likely still operational. No public page title, SSL certificate details, or content analysis have been released, so the exact phishing lure or targeted brand cannot be confirmed at this time.

Defenders should treat the domain as hostile: add pagamento.menudoimportador.com.br to DNS and proxy deny lists, monitor traffic to the associated Cloudflare IP for anomalous patterns, and enforce outbound filtering for any URLs that resolve to that address. Continuous re‑evaluation is advised, as additional indicators such as page content, certificate fingerprints, or new vendor detections may emerge and further clarify the campaign’s scope.