blog-serviciobancoppel[.]com

The domain blog-serviciobancoppel.com is currently classified as a high‑risk generic phishing site. It was registered on 2025‑11‑08 through Dynadot LLC and is hosted on IP address 91.222.173.30, which belongs to ASN 43641 (SOLLUTIUM EU Sp z.o.o.) and is geolocated in the Netherlands. The domain resolves to this single IP and uses the nameservers ns1-us.v-sys.org and ns2-us.v-sys.org. An MX record is present with priority 0 pointing to the domain itself, and the TLS certificate presented is issued to globaloffshoremargin.com, indicating a mismatch between the certificate and the domain name. The HTTP response returns status 200 and the page title is "Bienvenido"; no further content analysis is available. Reputation services show a Gridinsoft trust score of 0/100 and a Scamadviser score of 36/100, reflecting a poor trust profile. VirusTotal analysis reports 12 of 93 security vendors flagging the domain, and it appears on at least one public blocklist. The domain has been blocked by PhishDestroy. Given the high risk rating, the active status, and the corroborating technical indicators, defenders should block both the domain and its associated IP, monitor for related traffic, and incorporate the indicators (domain name, IP, ASN, and nameserver data) into detection rules. The lack of detailed page content prevents identification of specific phishing tactics, so continued observation of any payloads or credential‑harvesting activity is recommended.