smtp[.]coolhair[.]com[.]cn

The domain smtp.coolhair.com.cn appears to be a phishing site impersonating legitimate email services. It currently holds a VirusTotal detection score of 15 out of 95, indicating a considerable level of suspicious activity. The page title, 'Apache2 Ubuntu Default Page: It works,' suggests a poorly designed front, often indicative of a phishing attempt aimed at harvesting credentials. URLQuery has also flagged the domain with 2 detections, further establishing its malicious intent.

Registered just 3 days ago, smtp.coolhair.com.cn is under the management of a registrar from Guangdong, China, though the specific country information remains unclear. The domain is hosted on an IP address known for shared hosting, which is often utilized by malicious actors to minimize costs while proliferating their phishing schemes. Additionally, it is already blocklisted, marking it as a clear risk to internet users.

Currently, smtp.coolhair.com.cn remains active. PhishDestroy has reported the domain and is monitoring its status to prevent further phishing activities targeting users. Immediate action is warranted to protect potential victims from this impersonation tactic.