wbv-poderjudicial-ni[.]netlify[.]app

PhishDestroy identifies wbv-poderjudicial-ni.netlify.app as an active credential theft domain designed to trick users into surrendering login credentials. The site impersonates Nicaragua’s Poder Judicial (Judicial Branch), a high-value target due to its trusted role in legal and government services. Attackers leverage the netlify.app subdomain to lend an air of legitimacy, while the prefix “wbv-poderjudicial-ni” is crafted to appear as an official subpage. Visitors who enter credentials risk immediate account takeover, data exposure, or financial loss if reused across other platforms.

This domain was flagged by 9 of 95 security vendors on VirusTotal within hours of first resolution. It resolves to IP 35.157.26.135 and uses a DigiCert SSL certificate to appear secure, despite hosting malicious content. The domain is hosted on Netlify, a legitimate cloud platform often abused by threat actors due to its free tier and rapid deployment capabilities. Netlify provides hosting, not domain registration; the actual registrant remains obscured via proxy services, which is common in credential theft operations to delay takedowns and attribution.

If you visited this site, immediately cease entering any information. Check your email and login credentials for unauthorized access or password reset prompts. Enable multi-factor authentication on all accounts using this password, especially those linked to official government or legal services. Report the domain to your IT team or email security provider, and consider running a password audit. Do not click any links or download files from the page. If you entered credentials, change them on a separate, trusted device using a secure network. Monitor accounts for suspicious activity and notify your organization’s security team if you’re a business user.