verificacion[.]cc

This domain, verificacion.cc, is flagged as a credential theft operation targeting users through fake Know Your Customer (KYC) and Anti-Money Laundering (AML) verification pages. The site presents itself as a legitimate identity validation service, tricking visitors into submitting sensitive personal and financial information. Such data is typically exploited for account takeovers, financial fraud, or sold on underground markets. The threat specifically mimics institutional KYC processes, increasing the likelihood of successful deception among users expecting such verification requests. Analysis indicates verificacion.cc was registered on November 06, 2025, through GoDaddy.com, LLC, an uncommon registrar choice for legitimate verification services. It resolves to the IP address 185.158.133.1 and uses an SSL certificate issued by Google Trust Services, which may lend a false sense of security. VirusTotal reports that 14 out of 95 security vendors detect this domain as malicious, and it appears on one security blocklist. The page title, 'Verificacion.cc - Verificación de Identidad KYC & AML,' directly aligns with the credential theft theme, reinforcing its fraudulent intent. Users who visited verificacion.cc should assume their submitted credentials or personal data have been compromised. Immediate actions include changing passwords for any accounts where the same credentials were used, enabling multi-factor authentication where available, and monitoring financial statements for unauthorized transactions. If government-issued IDs or financial documents were uploaded, consider reporting the incident to relevant authorities or credit bureaus to mitigate identity theft risks. The domain is currently offline, but similar threats may reappear under different addresses.