guiacliente[.]com

The domain guiacliente.com has been identified as a phishing portal specifically targeting users of DG SERVICOS, a recognized service provider. This site is designed to harvest credentials and sensitive information through fraudulent login interfaces mimicking legitimate DG SERVICOS customer portals. As of the latest verification, the domain is currently offline, though prior activity indicates an elevated risk of credential theft and financial fraud for unsuspecting visitors. Analysis of technical indicators reveals multiple red flags. The domain is flagged by 4 of 95 security vendors on VirusTotal, including detection as a phishing or malicious site. It appears on one security blocklist, further confirming its malicious intent. Registered through NiceNIC International Group Co., Limited on February 21, 2026, the domain resolves to the IP address 188.114.96.3. Infrastructure analysis reveals the use of Cloudflare CDN and HTTP/3 protocol, which are commonly employed to obfuscate hosting origins and evade detection. The SSL certificate is issued by Google Trust Services, a legitimate provider often exploited by threat actors to lend credibility to malicious sites. The page title, 'Inicio - DG SERVICOS,' directly references the impersonated brand, reinforcing the phishing narrative. The current status of guiacliente.com is offline, though domains of this nature often resurface under different names or infrastructure. Organizations and users are advised to treat this domain as compromised and implement the following measures: block the domain and its associated IP (188.114.96.3) at the network perimeter; monitor for any resurgence of the domain or similar phishing attempts targeting DG SERVICOS; and educate users on recognizing phishing indicators, such as mismatched URLs, unexpected login prompts, and SSL certificate inconsistencies. If credentials were entered on this site, immediate password resets and multi-factor authentication enforcement are recommended for affected accounts.