itens-ze[.]shop

This domain, itens-ze.shop, is identified as an active phishing infrastructure impersonating ZE Express, a beverage delivery service. The site presents fraudulent payment interfaces under the guise of legitimate product offerings, specifically targeting users seeking refrigerated drinks as indicated by the page title 'ZE Express | Bebidas geladas.' The threat type is classified as generic phishing with a high-risk assessment due to its operational status and confirmed malicious activity. Analysis indicates the domain was registered on June 16, 2026, through Dynadot Inc., and currently resolves to the IP address 88.80.17.179, hosted on AS33837 (Fredrik Holmqvist, SE). Security vendor assessments on VirusTotal reveal that 8 out of 95 engines have flagged this domain as malicious. The domain appears on one security blocklist and is actively blocked by at least one threat intelligence feed. The SSL certificate is issued by Let's Encrypt (YR1), a common practice among phishing operators to lend superficial legitimacy to fraudulent sites. As of the latest verification, itens-ze.shop remains active and continues to pose a risk to users. Organizations and individuals are advised to block the domain and its associated IP address (88.80.17.179) at the network level. Users should be educated to recognize phishing indicators, such as mismatched URLs, unsolicited payment requests, and spoofed branding. Monitoring for similar domains registered through Dynadot Inc. or resolving to the same IP infrastructure may help preempt further phishing campaigns.