es-web-servicios[.]com

The domain es-web-servicios.com was created on 21 February 2026 and is currently taken offline. Infrastructure analysis shows the domain is registered through NiceNIC International Group Co., Limited and uses Cloudflare DNS with authoritative nameservers drawn.ns.cloudflare.com and lilith.ns.cloudflare.com. DNS resolution points to the IP address 188.114.96.3, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The TLS certificate presented is issued by Google Trust Services under the WE1 intermediate, confirming a valid HTTPS endpoint at the time of observation. Web‑application fingerprinting identified a WordPress stack running on Nginx with PHP and MySQL, and HTTP Strict Transport Security (HSTS) is enabled.

The page title returned from the site is “Home - Credicentro Coop,” indicating an attempt to reference the Credicentro Coop brand, although the content of the page has not been captured. Threat intelligence flags the domain as a generic phishing campaign. Four of ninety‑three VirusTotal scanners flagged the site, and the domain appears on a single security blocklist. PhishDestroy has also blocked the domain, and Gridinsoft assigned a trust score of 0 out of 100, reflecting a high confidence of malicious intent. Given the observed indicators, defenders should add es‑web‑servicios.com and its hosting IP 188.114.96.3 to block lists and network‑level deny rules.

Monitoring for future DNS or certificate changes is advised, as Cloudflare can quickly reassign IP resources. Security devices that leverage reputation feeds should be updated to reflect the four vendor detections and the presence on the PhishDestroy blocklist. Continuous observation of the registrar NiceNIC International Group Co., Limited may reveal additional domains employing the same infrastructure. Until the site is definitively taken down, the domain should be treated as hostile and excluded from user‑access paths.