nodoespacio[.]com

Analysis indicates nodoespacio.com is an active high-risk generic phishing domain used to facilitate unauthorized credential collection through a fake login workflow. The detected page title "Ourtime" suggests the domain may be attempting to impersonate or imitate a trusted service interface to increase user confidence and capture account information. The threat category is classified as generic_phishing, with potential impact including exposure of usernames, passwords, and associated account data.

Technical analysis identified multiple indicators associated with malicious infrastructure. VirusTotal reports a detection rate of 9/95 security vendors for nodoespacio.com. The domain is registered through Domain.com - Network Solutions, LLC and was created on May 31, 2007. Infrastructure analysis shows resolution to IP address 162.221.190.194, with IP location identified as the US under AS33182 HostDime.com, Inc. The SSL certificate is listed as Nodo Espacio / www.nodoespacio.com. The domain appears on 1 security blocklist and is blocked by PhishDestroy. Current status remains active, increasing the likelihood of continued exposure.

Mitigation actions should focus on preventing credential compromise and reducing user exposure. Organizations should block access to nodoespacio.com through web filtering controls, monitor related DNS and network activity, and investigate any authentication attempts originating from the domain. Users who accessed the page should change potentially exposed passwords, enable multi-factor authentication where available, and review account activity for unauthorized access. Security teams should continue monitoring the domain for infrastructure changes, additional malicious pages, or expansion of the phishing campaign.