portal-gestion-accesosweb[.]com

Analysis of portal-gestion-accesosweb.com indicates a high-risk phishing domain targeting users of Cooperativa Ahorro y Crédito de Barranquitas, as evidenced by the page title 'Cooperativa Ahorro y Crédito de Barranquitas - ¡Nuestro centro eres Tú!' and technical infrastructure linked to malicious activity. The domain was registered on February 21, 2026, through NiceNIC International Group Co., Limited, and resolves to IP 188.114.97.3, hosted on Cloudflare's network (AS13335). A 302 HTTP redirect suggests dynamic content delivery or evasion tactics, while the SSL certificate issued by Google Trust Services (WE1) may lend superficial legitimacy. Security vendors have flagged the domain, with 9 of 93 engines on VirusTotal detecting malicious indicators.

It appears on at least one blocklist (PhishDestroy), and Gridinsoft assigns a trust score of 0/100. Technologies detected include WordPress, MySQL, PHP, and Nginx, which are commonly exploited in phishing campaigns for their ease of deployment and known vulnerabilities. Nameservers (cortney.ns.cloudflare.com, nikon.ns.cloudflare.com) further tie the domain to Cloudflare, a frequent choice for threat actors due to its privacy and DDoS protection features. While the exact phishing kit or payload remains unconfirmed, the combination of a targeted financial institution's branding, recent registration, and detection by multiple security vendors strongly suggests malicious intent.

Defenders should treat this domain as active and block it at the DNS or network level. Organizations associated with Cooperativa Ahorro y Crédito de Barranquitas should alert users to avoid interaction with this domain and monitor for credential theft or unauthorized transactions. Further analysis of the site's content or backend could provide additional indicators of compromise, but current evidence is sufficient to classify this as a high-risk phishing threat.