sweetempire[.]shop

This domain, sweetempire.shop, is flagged as a generic phishing threat under investigation. It impersonates the Laboratorio joker brand, likely to deceive users into providing credentials or sensitive information. The site is currently active and resolves to IP 104.21.63.141, with an SSL certificate from Google Trust Services. The threat type suggests credential theft or brand impersonation, as the page title explicitly references Laboratorio joker, indicating a targeted attempt to exploit trust in that brand.

Evidence from intelligence sources confirms the domain's risk. VirusTotal reports 0/95 detections, meaning no security vendors have flagged it yet, which underscores its stealth. AlienVault OTX shows it in 1 threat intelligence pulse, indicating some prior recognition. The domain's infrastructure includes Cloudflare hosting via IP 104.21.63.141 and a valid SSL certificate, complicating takedown efforts. No creation date or registrar details are available from the provided data, but the active status and lack of blocklist entries suggest recent deployment.

Users who visited sweetempire.shop should immediately change passwords for any accounts entered on the site and monitor for unauthorized activity. Run a full antivirus scan and enable multi-factor authentication on affected services. Report the domain to relevant threat intelligence platforms to aid in blocking. Avoid further interaction with the domain and educate users about verifying brand URLs before entering credentials.