clientes-serviciosonline[.]com

Analysis of the domain clientes-serviciosonline.com indicates it is an active high-risk phishing site targeting customers of Cooperativa Ahorro y Crédito de Barranquitas. The domain was registered on February 21, 2026, through NiceNIC International Group Co., Limited, a registrar frequently associated with suspicious domains. As of July 24, 2026, the domain resolves to IP address 104.21.29.159, hosted on Cloudflare's infrastructure (AS13335), which is commonly used to obscure the true origin of malicious sites. The page title, 'Cooperativa Ahorro y Crédito de Barranquitas - ¡Nuestro centro eres Tú!', explicitly suggests an attempt to impersonate the legitimate financial institution, though the exact content and functionality of the site remain unconfirmed. Security vendor detections are present but limited: 13 of 93 engines on VirusTotal flag the domain as malicious.

The domain appears on at least one security blocklist and is actively blocked by PhishDestroy. Google Safe Browsing classifies the site as engaging in social engineering, a designation consistent with phishing activity. The SSL certificate, issued by Google Trust Services (WE1), is valid and does not inherently indicate compromise, though it is commonly exploited by threat actors to lend false legitimacy. Infrastructure analysis reveals the use of Cloudflare nameservers (alexis.ns.cloudflare.com and erin.ns.cloudflare.com) and technologies including WordPress, MySQL, PHP, Nginx, and HSTS. The HTTP 302 redirect status suggests the site may be dynamically routing visitors, a tactic often employed in credential harvesting or malware distribution.

Trust scores from Gridinsoft and Scamadviser are notably low, at 0/100 and 40/100 respectively, further supporting the assessment of high risk. Defenders should treat this domain as malicious and implement blocking at the network and endpoint levels.