envios[.]menudoimportador[.]com[.]br

The domain envios.menudoimportador.com.br was registered on June 12 2026 through GoDaddy. It resolves to the IP address 104.21.81.167, which is associated with a content‑delivery network commonly used for malicious hosting. The domain appears on one security blocklist and is currently blocked by the PhishDestroy feed, indicating that at least one protective service has taken it down.

VirusTotal has analyzed the domain and four of ninety‑one security vendors returned a positive detection, confirming that a subset of scanners recognize it as malicious. No additional public intelligence such as Safe Browsing, OTX, or SSL certificate details is presently available. The limited detection surface suggests that the campaign may be in an early stage or employing techniques to evade broader attribution.

Defenders should add the domain and its resolving IP to deny‑list rules, monitor outbound DNS queries for lookups to this name, and ensure that any user‑generated alerts that reference the domain trigger immediate investigation. Because the underlying phishing kit or targeted brand is not disclosed, broader email‑filtering policies that block generic phishing attempts remain advisable. Continuous re‑evaluation is recommended, as future scans may increase the detection count and reveal additional infrastructure components.