creditorotativo[.]com[.]co

The domain creditorotativo.com.co is currently resolvable to the IPv4 address 158.94.209.40. Registration data shows the domain was created on 14 May 2011 and is hosted through NameCheap, Inc., using the authoritative name servers dns1.namecheaphosting.com and dns2.namecheaphosting.com. No public SSL certificate details are available, and HTTP response codes have not been disclosed, so the web service characteristics remain unverified.

The domain is listed on a single security blocklist and is actively blocked by the PhishDestroy service, indicating that at least one defensive feed has identified it as malicious. VirusTotal records confirm that the domain was submitted to 95 scanning engines, none of which generated a detection at the time of analysis; this lack of detection does not constitute a safety guarantee. The limited visibility into page content, brand targeting, or phishing kit means the exact impersonation strategy cannot be confirmed.

Analysts should treat the domain as a potential phishing infrastructure pending further investigation. Recommended mitigation steps include adding the domain and its resolved IP address to network deny lists, monitoring DNS queries for the domain, and correlating any inbound traffic with known phishing patterns. Continuous re‑evaluation is advised, as future scans or threat‑intel feeds may reveal additional indicators such as malicious payloads, credential‑harvesting forms, or compromised hosting artifacts.