cef[.]atualizacaocadastral[.]co[.]ua

The domain cef.atualizacaocadastral.co.ua has been identified as a confirmed phishing site engaged in brand impersonation, specifically targeting SEI. The page title, 'Atualização cadastral,' suggests an attempt to deceive users into believing they are interacting with an official SEI account update portal. As of the latest verification, this domain has been taken offline, though prior activity remains a concern for historical exposure. Analysis of the domain reveals multiple technical indicators of malicious intent. The domain is flagged by 19 of 95 security vendors on VirusTotal, indicating broad detection as a phishing threat. It was registered through Cloudflare, Inc., and resolves to the IP address 172.67.190.194, hosted on AS13335 (Cloudflare, Inc.) in the United States. The domain appears on one security blocklist and lacks an SSL certificate, further reducing its legitimacy. The infrastructure analysis reveals no additional subdomains or associated certificates, reinforcing its isolated use for phishing operations. The current status of cef.atualizacaocadastral.co.ua is offline, though residual risk persists for users who may have interacted with the domain prior to its takedown. Organizations and individuals are advised to block the domain and its resolving IP at the network level to prevent accidental access. Users who may have entered credentials or sensitive information on this site should immediately reset passwords and monitor accounts for unauthorized activity. Security teams are recommended to review logs for connections to 172.67.190.194 and cef.atualizacaocadastral.co.ua, as well as to implement detection rules for similar phishing patterns targeting SEI or other financial services brands.