cooltentregas[.]com[.]br

This domain, cooltentregas.com.br, is flagged as a high-risk phishing site designed to mimic legitimate retail or e-commerce platforms. Analysis indicates the site operates as a fake storefront, likely targeting users with fraudulent product listings or checkout pages to harvest payment card details and personal credentials. No specific brand impersonation or crypto drainer kit signatures have been confirmed, but the infrastructure aligns with generic phishing frameworks used for financial fraud. Infrastructure analysis reveals concrete technical indicators: the domain is detected by 3 out of 95 security vendors on VirusTotal, registered through Bluehost, and resolves to the IP address 162.241.60.110. The domain was created on June 08, 2026, an anomalous future date suggesting potential registry manipulation or data entry error. The SSL certificate is issued by Let's Encrypt (R12), a common choice for both legitimate and malicious sites. The domain appears on one security blocklist and is actively blocked by PhishDestroy, though it remains accessible at the time of assessment. Current status confirms the domain is still active, posing an ongoing threat to users. Response actions should include immediate blocking of the domain and IP at the network level, as well as monitoring for related infrastructure reuse. The remaining risk is classified as high due to the domain's operational status, low detection rate, and lack of takedown. Users are advised to avoid interaction with the site, verify retailer authenticity through official channels, and report any suspicious activity to relevant security teams for further investigation.