infogobierno[.]net

This domain is flagged as a high-risk credential theft operation specifically targeting cryptocurrency wallet users. Analysis indicates the infrastructure is designed to impersonate Bitpie, a legitimate digital asset management platform, with the explicit goal of harvesting login credentials and private keys from unsuspecting victims. The threat type is classified as crypto credential theft, not generic phishing, due to the targeted nature of the deception and the financial assets at stake. Infrastructure analysis reveals the following technical indicators: the domain infogobierno.net is registered through Gname.com Pte. Ltd. and was created on May 08, 2019. It currently resolves to the IP address 188.114.96.3 and is detected by 5 out of 95 security vendors on VirusTotal. The domain appears in 2 threat intelligence pulses on AlienVault OTX, confirming its malicious classification. The page title, 'Bitpie app-Bitpie wallet user experience,' directly mimics the branding of the legitimate Bitpie wallet, further corroborating the credential theft intent. Mitigation steps for this specific threat type include immediate blocking of the domain and its associated IP address (188.114.96.3) at the network perimeter. Organizations handling cryptocurrency transactions should deploy additional authentication measures, such as hardware-based multi-factor authentication, to protect wallet access. End users are advised to verify domain authenticity before entering credentials and to cross-reference official wallet application sources. Given the domain's longevity (active since 2019), historical logs should be reviewed for prior interactions, and any credentials exposed to this domain should be considered compromised and rotated immediately.