es-servicios-digitales[.]com

This domain, es-servicios-digitales.com, is actively flagged as a high-risk phishing site impersonating Cooperativa Ahorro y Crédito de Barranquitas, as indicated by its page title 'Cooperativa Ahorro y Crédito de Barranquitas - ¡Nuestro centro eres Tú!'. Registered on February 21, 2026, through NiceNIC International Group Co., Limited, the domain resolves to IP 188.114.96.3, hosted on Cloudflare's infrastructure (AS13335) in the United States. The site employs an SSL certificate issued by Google Trust Services (WE1) and uses technologies including WordPress, MySQL, PHP, Nginx, and HSTS, which are consistent with legitimate web infrastructure but frequently exploited in phishing operations. Analysis reveals the domain is currently active, returning an HTTP 302 redirect status, which may indicate an attempt to evade detection or route victims to a secondary malicious endpoint.

It appears on one security blocklist (PhishDestroy) and is flagged by 4 of 95 security vendors on VirusTotal, suggesting moderate but not universal detection. The Gridinsoft trust score of 0/100 further supports its classification as malicious. Nameservers are configured to Cloudflare (drew.ns.cloudflare.com and lilith.ns.cloudflare.com), a common tactic to obscure hosting details and leverage Cloudflare's CDN and security features to avoid takedowns. While the domain's infrastructure mimics that of a legitimate financial institution, no concrete evidence links it to a specific phishing kit or payload.

The exact content and functionality of the site remain unanalyzed, but the combination of impersonation, recent registration, and detection by security vendors warrants immediate defensive action. Defenders should block the domain at the DNS level, monitor for connections to the associated IP (188.114.96.3), and alert users to the impersonation of Cooperativa Ahorro y Crédito de Barranquitas. Further investigation into the redirect chain and any associated payloads is recommended.