app-accesosistema[.]com

Analysis as of July 24 2026 indicates that the domain app-accesosistema.com is actively being used for a generic phishing campaign. The domain was registered on February 21 2026 through NiceNIC International Group Co., Limited and resolves to the Cloudflare edge address 172.67.189.251, which is associated with ASN 13335 (Cloudflare, Inc.) and located in the United States. The site presents a valid SSL certificate issued by Google Trust Services under the WE1 intermediate, which allows encrypted HTTPS connections and may lend an appearance of legitimacy. HTTP requests receive a 302 redirect response, a pattern commonly observed in credential‑harvesting pages that forward victims to a final payload or login form. The underlying web stack is identified as WordPress running on PHP with a MySQL backend behind an Nginx server, and HTTP Strict Transport Security (HSTS) is enabled, further reinforcing the perception of a trustworthy site.

Reputation checks show a Gridinsoft trust score of 0 out of 100, indicating an extremely low confidence in safety. VirusTotal scans have flagged the domain in three of ninety‑three antivirus engines, and the domain appears on one external blocklist. PhishDestroy has already added the domain to its blocklist, confirming that threat‑intel communities consider it malicious. The page title returned by the server reads “Cooperativa Ahorro y Crédito de Barranquitas - ¡Nuestro centro eres Tú!”, suggesting an attempt to impersonate a financial cooperative, although no further content analysis is available.

While the presence of a legitimate‑looking certificate and popular web technologies can reduce suspicion for casual users, the combination of a recent registration, low trust score, multiple vendor detections, and active blocklist listings provides strong evidence of malicious intent. Defenders should block DNS resolution for app-accesosistema.com at the network perimeter, add the IP 172.67.189.