cortelazcu[.]com

The domain cortelazcu.com is a generic phishing site posing as a financial institution, specifically mimicking 'Cortelaz Credit Union'. It does not impersonate a known brand but presents itself as a legitimate credit union to deceive users into submitting sensitive credentials. The site is currently taken offline, reducing immediate risk, but its prior activity classifies it as an elevated threat for credential theft or fraudulent transactions.

Technical indicators confirm cortelazcu.com was flagged by 1 of 95 VirusTotal security vendors, including Netcraft, and appears on 1 security blocklist (PhishDestroy). The domain was registered through Cosmotown, Inc. on December 31, 2024, and resolved to the IP address 163.61.188.222, hosted under AS153568 (NEW DHAKA HARDWARE) in the US. The SSL certificate was issued by Let's Encrypt (R13), and the observed page title was 'Cortelaz Credit Union - Home'. Technologies detected include PHP, Firebase, Bootstrap, and jQuery, with an HTTP status of 500 at the time of assessment. Nameservers were dns1.lytehosting.com, dns2.lytehosting.com, dns3.lytehosting.com, and dns4.lytehosting.com.

Users who interacted with cortelazcu.com should immediately change any passwords entered on the site, particularly for financial accounts, and enable two-factor authentication where available. Monitor bank statements and credit reports for unauthorized transactions. Report the domain to the registrar (Cosmotown, Inc.), the hosting provider (NEW DHAKA HARDWARE), and platforms like Google Safe Browsing or PhishTank to aid in takedown efforts. If credentials were reused across other services, update those passwords as well to prevent further compromise.