cohezo[.]org

This domain is flagged as a credential harvesting phishing site targeting users through deceptive collaboration-themed landing pages. Analysis indicates the site mimics legitimate team management platforms to trick visitors into entering sensitive login credentials, which are then captured by threat actors for unauthorized access or financial fraud. The page title 'Cohezo - Where Teams Come Together' suggests a social engineering approach designed to exploit trust in workplace productivity tools. Infrastructure analysis reveals concrete indicators of malicious activity. The domain cohezo.org was registered on March 06, 2026, through NiceNIC International Group Co., Limited, an offshore registrar frequently associated with high-risk registrations. Security vendors have detected the domain with 4 out of 95 engines flagging it as malicious, while it appears on three independent security blocklists. The domain resolves to IP address 188.114.96.3, which has been linked to previous phishing campaigns in recent months. Users who visited cohezo.org should take immediate action to mitigate potential compromise. First, disconnect any devices used to access the site from networks and scan them with updated security tools. Reset all passwords entered on the site, particularly for work-related accounts, financial services, or email platforms. Enable multi-factor authentication wherever possible to prevent unauthorized access. Monitor accounts for unusual activity and report any suspicious transactions to relevant security teams. Given the domain's elevated risk status and offline status, users should remain vigilant for follow-up phishing attempts via email or messaging platforms.