enlacedelacosta[.]com[.]co

The domain enlacedelacosta.com.co is identified as a credential phishing site targeting users of Enlace Total de la Costa, a regional telecommunications provider. Analysis confirms this domain operated as a generic_phishing resource under the page title 'Enlace Total de la Costa.' As of the latest verification, the domain has been taken offline, though prior infrastructure remains documented for threat intelligence purposes. Infrastructure analysis reveals the domain was flagged by 9 of 95 security vendors on VirusTotal, indicating broad detection consensus. It resolved to the IP address 44.211.14.38 and was registered through Hello Internet Corp 8 on March 26, 2026. The domain appears on one security blocklist, and its SSL certificate was issued by Let's Encrypt (R12), a common choice among threat actors for establishing HTTPS legitimacy. The creation date suggests the domain was likely set up specifically for malicious campaigns, as it postdates typical legitimate registration timelines for the impersonated brand. While enlacedelacosta.com.co is currently offline, its indicators remain relevant for threat hunting and defensive measures. Organizations are advised to block the domain and its associated IP at perimeter security controls, including firewalls and email gateways. Security teams should review logs for connections to 44.211.14.38 or references to the domain in web and email traffic. End users who may have interacted with the site should be instructed to reset credentials for any services accessed during the exposure window, particularly those tied to Enlace Total de la Costa accounts.