sempera[.]top

This domain, sempera.top, is identified as a generic phishing infrastructure designed to mimic a retail storefront. Analysis of the page title, 'Home - Sempera store,' suggests an attempt to impersonate a legitimate e-commerce platform, likely to harvest payment card details or login credentials. No specific drainer kit signatures were observed, but the domain aligns with common phishing tactics targeting financial data through fake checkout pages or account login portals. Infrastructure analysis reveals the following technical indicators: the domain is flagged by 3 out of 95 security vendors on VirusTotal, with a Let's Encrypt R12 SSL certificate in use. It resolves to the IP address 163.61.188.7 and appears on one security blocklist. The domain was registered on May 17, 2026, through Global Domain Group LLC. No Google Safe Browsing (GSB) detections were recorded at the time of analysis, but its presence in one AlienVault OTX threat intelligence pulse further corroborates malicious intent. As of the latest assessment, sempera.top has been taken offline, reducing immediate exposure risk. However, the domain's infrastructure remains registered, and the SSL certificate may still be valid, allowing for potential reactivation. Response actions should include monitoring for renewed DNS resolution or SSL certificate reissuance. Organizations are advised to block the domain and associated IP at perimeter defenses, while end-users should verify e-commerce platforms through official channels to avoid credential or payment data compromise.