bebidas-ze[.]click

This domain operates as a fraudulent beverage delivery portal targeting Portuguese-speaking users under the guise of ZE Express, a legitimate cold drink distribution service. Analysis indicates the site presents a fabricated storefront interface labeled 'Bebidas geladas' to collect payment card information and personal delivery details from victims attempting to place beverage orders. The page structure mimics genuine e-commerce platforms, featuring product listings, pricing tiers, and checkout workflows designed to appear authentic to unsuspecting customers seeking beverage deliveries. Infrastructure analysis reveals multiple high-risk indicators. The domain bebidas-ze.click was registered through Dynadot, LLC on June 28, 2026, with an anomalous future creation date suggesting potential WHOIS manipulation. Current DNS resolution points to IP address 88.80.17.179, a host previously associated with other fraudulent storefronts. VirusTotal detection metrics show 3 of 95 security vendors flagging the domain as malicious, while SSL certificate provisioning through Let's Encrypt provides a false sense of security through HTTPS implementation. The domain remains active as of investigation, with no takedown requests processed through the registrar. Users who interacted with bebidas-ze.click should immediately cease all engagement and perform damage control procedures. Any entered payment credentials must be considered compromised and reported to financial institutions for card replacement. Browser cache and saved credentials should be cleared to prevent persistent access. System scans using updated security tools are recommended to detect potential secondary payloads. Portuguese-speaking users should be particularly vigilant for similar beverage-themed scams, as the localized content suggests targeted regional operations. Organizations should update blocklists to include this domain and its associated IP address 88.80.17.179 in network security controls.