k6scss-bf[.]myshopify[.]com

Analysis as of July 23, 2026 flags k6scss-bf.myshopify.com as an active brand impersonation site targeting the base brand. The domain is hosted on Shopify infrastructure, confirmed by the presence of Shopify and jQuery libraries, HSTS enforcement, Cloudflare front‑end services, and HTTP/3 support. It resolves to IP address 185.199.109.153, which belongs to Fastly, Inc. (AS54113) in the United States, and the registration is routed through the SHOPIFY-NET registrar (ASN 13335). The site presents a valid SSL certificate issued by Let’s Encrypt (E7), indicating encrypted HTTPS delivery despite its malicious intent. HTTP responses return a 301 redirect, suggesting an intentional URL forwarding mechanism.

The page title observed is "Central • Atendimento," and the scam is classified as an E‑Commerce Scam that impersonates the base brand. Reputation metrics are extremely poor: Gridinsoft assigns a trust score of 0 out of 100, and the domain appears on one security blocklist. PhishDestroy has already blocked the site, and VirusTotal reports that 14 of 95 scanning engines flag the domain as malicious. No nameserver information is available (NS_NOT_FOUND).

While the exact visual content of the site has not been captured, the technical indicators collectively demonstrate a high‑risk infrastructure designed to deceive consumers. Defenders should immediately add k6scss-bf.myshopify.com to network and endpoint blocklists, monitor DNS queries for the domain, and enforce TLS inspection to detect any attempted connections. Continuous re‑scanning with multi‑engine services is recommended to capture any changes in payload or hosting. The combination of low trust scores, multiple vendor detections, and active blocklist presence justifies a high‑risk classification and warrants proactive mitigation.