ze-entregabebidas[.]sbs

This domain is flagged as a high-risk generic phishing threat targeting users through fake delivery service schemes. Analysis indicates the infrastructure is designed to deceive victims into entering credentials or payment details under the guise of a beverage delivery platform, a common tactic in fraudulent order confirmation or tracking scams. Infrastructure analysis reveals the domain ze-entregabebidas.sbs was registered on June 21, 2026, through Dynadot Inc, and currently resolves to IP address 88.80.17.179. The domain employs a Let's Encrypt SSL certificate, which, while providing encryption, is frequently abused by threat actors to lend false legitimacy. Security vendor detections on VirusTotal report 16/95 flags, while AlienVault OTX lists the domain in one threat intelligence pulse. Despite these indicators, the domain remains active and unblocked by many security controls. Mitigation requires immediate blocking of the domain and its resolving IP (88.80.17.179) at network and endpoint layers. Organizations should monitor for user interactions with the domain, particularly in regions where beverage delivery services are prevalent. Security teams are advised to review logs for connections to the IP and domain, and to alert users who may have entered credentials or financial details. Given the domain's recent registration and active status, continuous monitoring for related infrastructure (e.g., newly registered lookalike domains) is recommended.