redemptioncoffeehouseandroastery[.]com

This domain, redemptioncoffeehouseandroastery.com, was first observed on July 12, 2026 and is classified as a high‑risk generic phishing site. The domain was registered on May 27 2026 through NameCheap, Inc. and is hosted behind Cloudflare’s network, resolving to IP 104.21.95.31, which resolves to a Canadian location. DNS is served by fiona.ns.cloudflare.com and moura.ns.cloudflare.com, and the site presents a valid Let’s Encrypt (YE1) TLS certificate. The web page returns HTTP 200 and advertises “Vegas123 : Agen Slot88 Jackpot Resmi Slot Gacor Server Luar Negeri & Toto Gratis Spins Terpercaya”, a typical gambling‑oriented lure used to harvest credentials. Infrastructure analysis shows a Gridinsoft trust score of 0 / 100, indicating extreme maliciousness. VirusTotal scans report that 2 of 95 security vendors flag the domain, and the domain is listed on the PhishDestroy blocklist. The combination of a fresh registration, low trust score, and active phishing page confirms a high likelihood of credential‑stealing activity. Current intelligence lacks details on the exact phishing vector, such as email templates or targeted brands, and no malware payloads have been observed. The absence of additional indicators beyond the hosting and page content leaves the full scope of the campaign uncertain. Continuous monitoring is required to determine whether the site evolves to host malicious binaries or expands its lure set. Defenders should add redemptioncoffeehouseandroastery.com to network blocklists and enforce DNS sinkholing to prevent user access. TLS inspection should be enabled to capture any credential submissions, and security devices should be tuned to flag HTTP 200 responses that contain the observed page title. Regular re‑scans of the domain on VirusTotal and updates to threat‑intel feeds are recommended to capture any new detections.