casasbahiaonline[.]shop

This domain is identified as a fraudulent retail checkout page targeting consumers seeking discounted home appliances, specifically presenting a fake offer for a Mondial 2-in-1 Air Fryer Oven. The site mimics legitimate e-commerce platforms to harvest payment credentials, shipping details, and personal identification data during the checkout process. Analysis indicates the fraudulent intent is reinforced by the domain's deceptive structure, including a fabricated product title in the page header and a simulated transaction flow designed to capture sensitive financial information. Infrastructure analysis reveals multiple technical indicators supporting the phishing classification. The domain was registered through HOSTINGER operations on June 16, 2026, an anomalous creation date suggesting domain spoofing or backdating. It resolves to IP address 35.157.26.135, hosted on Amazon.com infrastructure (AS16509) in Germany, despite targeting Brazilian consumers. Security vendor detection is currently low but notable, with 1 out of 95 engines on VirusTotal flagging the domain. The domain appears on one security blocklist and is actively blocked by PhishDestroy, further confirming its malicious status. The SSL certificate, issued by Let's Encrypt (serial YE1), provides encrypted connections to deceive users into trusting the site. Users who have visited casasbahiaonline.shop or entered any information on the site should take immediate action to mitigate risk. All credentials, payment details, or personal data submitted must be considered compromised. Affected individuals should contact their financial institutions to monitor or freeze accounts, change passwords for any reused credentials, and enable multi-factor authentication where available. It is recommended to scan local devices for malware, as phishing sites may deploy malicious scripts or redirect to exploit kits. Users should report the domain to local cybersecurity authorities and avoid interacting with any communications received from the site, including order confirmations or support requests.