maquiequiposmyosas[.]com

This domain, maquiequiposmyosas.com, operates as a credential theft portal designed to harvest login credentials under the guise of a legitimate document access service. The page title, Document Access Portal, suggests an attempt to deceive users into entering sensitive information, likely targeting corporate or institutional victims. Analysis indicates the infrastructure is tailored to mimic secure file-sharing platforms, increasing the likelihood of successful social engineering attacks. Infrastructure analysis reveals the domain was registered on August 21, 2019, through ENOM, INC., and resolves to the IP address 199.250.217.150. The domain is currently flagged by 19 out of 95 security vendors on VirusTotal, with additional detections in 2 AlienVault OTX threat intelligence pulses. It appears on one security blocklist, specifically PhishDestroy, further corroborating its malicious nature. The SSL certificate issued by Let's Encrypt provides a veneer of legitimacy, though this is a common tactic among threat actors to evade initial suspicion. Users who have interacted with this domain should immediately revoke any entered credentials, particularly if reused across other platforms. System administrators are advised to block the domain and its associated IP address at the network level. Affected individuals should monitor accounts for unauthorized access and enable multi-factor authentication where available. Given the domain's creation date and persistent threat indicators, organizations should review logs for prior interactions and assess potential exposure.