smtp-relay[.]coolhair[.]com[.]cn

The domain smtp-relay.coolhair.com.cn impersonates legitimate services and poses a risk to users. With a VirusTotal (VT) score of 14 out of 95, it indicates a significant number of detections pointing towards malicious activities. The page title suggests this domain is a deceptive setup, leveraging an Apache2 default page to appear benign. Additionally, it has been flagged by URLQuery for suspicious behavior, raising concerns about its intentions.

Registered just three days ago, this domain is associated with a registrar from Guangdong, China, although the country of registration remains unclear. The IP address 172.86.90.240 has been flagged in one blocklist, emphasizing its untrustworthy nature. The short age of the domain and its current status as active further indicate that it could be used for ongoing phishing scams or credential harvesting.

As of now, smtp-relay.coolhair.com.cn is still active. PhishDestroy has taken measures by reporting this domain and monitoring its activity to prevent further exploitation. Users are advised to remain vigilant and avoid interacting with this domain to safeguard their personal information.