bitcoinem5minutos[.]shop

The domain bitcoinem5minutos.shop is flagged as a high-risk brand impersonation phishing site. Created on August 22, 2025, the domain has been identified on two security blocklists, indicating that it is actively being monitored and flagged by cybersecurity professionals. The domain impersonates the brand 'sei,' a detail that suggests it is being used to deceive users into believing they are interacting with a legitimate entity associated with this brand. The domain resolves to the IP address 104.17.57.49, which has been cited in 22 threat intelligence pulses on AlienVault OTX, underscoring the potential for malicious activity associated with this infrastructure. The domain's trust score from Gridinsoft is 0 out of 100, the lowest possible rating, further confirming its high-risk status. The SSL certificate is issued by Let's Encrypt, a common choice for phishing sites due to its ease of use and credibility among users. The domain is also blocked by PhishDestroy and BLP-Malware, two reputable security vendors, which reinforces the need for immediate action to mitigate risks. The technologies detected on the site include GreatPages, Facebook Pixel, and Cloudflare Browser Insights, suggesting a well-constructed and potentially sophisticated phishing campaign. While the exact content of the website has not been analyzed, the available evidence points to a high likelihood of brand impersonation phishing. Defenders should take immediate steps to block this domain across their networks and educate users about the risks of interacting with unverified websites that purport to represent the 'sei' brand. Additionally, monitoring for similar domain registrations and IP resolutions can help in identifying and mitigating related threats. Organizations should also consider enhancing their incident response plans to address potential breaches resulting from this phishing campaign.