pedir-adega24h-ze[.]shop

This domain, pedir-adega24h-ze.shop, is flagged as a high-risk generic phishing site targeting users of ZE Express, a beverage delivery service. The page title 'ZE Express | Bebidas geladas' suggests an attempt to mimic the legitimate brand's online ordering system, likely to harvest login credentials or payment details through fraudulent forms. No specific drainer kit signatures have been identified, but the domain's infrastructure aligns with common phishing campaign patterns. Analysis indicates the domain was registered on June 12, 2026, through Dynadot Inc., an uncommon future date that may indicate domain spoofing or registry manipulation. It resolves to the IP address 88.80.17.179, hosted on AS33837 (Fredrik Holmqvist, SE). VirusTotal reports 8 out of 95 security vendors flagging the domain as malicious, while it appears on one security blocklist and is currently blocked by PhishDestroy. The SSL certificate is issued by Let's Encrypt (YR1), a common choice for both legitimate and malicious sites due to its free and automated issuance process. As of the latest assessment, pedir-adega24h-ze.shop remains active, posing an ongoing risk to users who may encounter it through phishing emails, SMS, or malvertising. Immediate response actions include blacklisting the domain and IP across security gateways, notifying the registrar (Dynadot Inc.) for potential takedown, and monitoring for related infrastructure. Despite these measures, the domain's continued operation and low detection rate (8/95) suggest it may evade some automated defenses, requiring manual verification by users and administrators to prevent credential compromise.