sherwin-williams-latam[.]com

This domain, sherwin-williams-latam.com, is currently flagged as an active brand impersonation phishing site targeting Sherwin-Williams, a global coatings manufacturer. The domain remains under investigation, with no confirmed takedown or mitigation actions observed as of this report. Analysis indicates the site may be designed to deceive users into divulging corporate credentials, personal information, or facilitating unauthorized transactions under the guise of official Sherwin-Williams Latin America operations. Infrastructure analysis reveals the domain was registered on April 23, 2026, through HOSTINGER operations, UAB, a registrar frequently associated with newly created phishing domains. The SSL certificate is issued by Google Trust Services, providing a superficial layer of legitimacy. Despite this, the domain has been identified in 4 AlienVault OTX threat intelligence pulses, indicating prior detection by security researchers. VirusTotal reports 0 detections out of 95 vendors, suggesting the domain has not yet been widely flagged by automated scanning systems. The domain appears on 1 security blocklist and is currently blocked by PhishDestroy, though no additional public blocklist entries have been recorded at this time. The risk posed by sherwin-williams-latam.com is assessed as moderate to high due to its active status and brand impersonation tactics. Organizations are advised to implement immediate network-level blocking for the domain and any associated IP addresses. Security teams should monitor for credential harvesting attempts originating from this domain, particularly those targeting Latin American corporate networks. End-users should be educated on verifying domain authenticity before entering sensitive information, with emphasis on checking for subtle misspellings or unofficial top-level domains. Further investigation into the domain's hosting infrastructure and potential lateral movement within compromised networks is recommended.