pascoashow[.]com

This domain is flagged for brand impersonation phishing, specifically targeting users through a fraudulent e-commerce platform mimicking a legitimate chocolate retailer. The threat type involves deceptive product listings, fake checkout processes, and potential credential harvesting or payment fraud under the guise of a seasonal sale event. The risk level is classified as elevated due to the domain's sophisticated infrastructure and targeted impersonation tactics. Analysis indicates the domain pascoashow.com was registered on April 21, 2026, through Fewmoretaps OU d/b/a Trustname.com. It resolves to the IP address 216.150.1.1 and employs a Let's Encrypt SSL certificate. VirusTotal reports 4 out of 95 security vendors flagging the domain as malicious, while it appears on one security blocklist. The domain has a Gridinsoft trust score of 0/100. Detected technologies include Salesforce Commerce Cloud, Salesforce, Vercel, jsDelivr, HSTS, and Google Analytics, suggesting an attempt to replicate legitimate e-commerce infrastructure. The page title, 'Páscoa Cacau Show 2026 - Ovos de Páscoa, Cestas e Chocolates Especiais,' aligns with seasonal phishing campaigns targeting Portuguese-speaking users. Mitigation steps for this brand impersonation threat include immediate blocking of the domain and its associated IP (216.150.1.1) at the network perimeter. Organizations should update endpoint protection rules to detect and prevent access to the domain, particularly for users in regions targeted by the campaign. Security teams are advised to monitor for indicators of compromise, such as unauthorized login attempts or unusual payment activity, especially during seasonal events. User awareness training should emphasize verifying domain legitimacy, checking SSL certificate details, and avoiding transactions on untrusted platforms. Additionally, internal systems should be scanned for any references to pascoashow.com or related infrastructure to ensure no residual exposure remains.