adega-24h-ze[.]shop

The domain adega-24h-ze.shop, active since June 2026, poses a significant threat with 10 out of 91 VirusTotal vendors marking it as malicious. Its page title, "ZE Express | Bebidas geladas," suggests it targets individuals seeking cold beverages, likely aiming to harvest sensitive information under the guise of a legitimate service.

Registered through Dynadot Inc. and hosted on IP 88.80.17.179 in Sweden, the site operates under the organization AS33837 Fredrik Holmqvist. The SSL certificate is issued by Let's Encrypt, a common choice for both legitimate and malicious sites due to its ease of acquisition. Despite being flagged by only one public blocklist, PhishDestroy, the platform risk score is notably high at 93/100, indicating a substantial threat level.

PhishDestroy's early detection of adega-24h-ze.shop, just a week after its creation, underscores the importance of proactive monitoring. The domain's rapid identification in PhishDestroy's pipeline highlights its ability to catch threats during the critical window before widespread antivirus database updates. This early warning system is crucial in mitigating risks posed by fresh phishing domains that exploit the lag in traditional detection methods.

Given the domain's active status and the specific targeting of beverage shoppers, potential victims should be aware of the tactics used to lure them into divulging personal information. The combination of a high platform risk score and multiple VirusTotal detections reinforces the need for vigilance when encountering similar domains, particularly those imitating well-known services or products.