ocidente-virtua[.]live

The domain ocidente-virtua.live has been identified as a brand impersonation phishing threat, specifically targeting the Google brand. Despite the page title reading "Bancolombia," the site was configured to deceive users into believing they were interacting with a legitimate Google service. This domain was created on June 8, 2026, and registered through Dynadot Inc. The phishing kit used was not explicitly named, but the site's behavior indicates a credential harvesting operation.

Technical indicators for this domain are severe. VirusTotal reports 10 out of 95 security vendors flagging it as malicious. The domain resolves to IP address 111.90.143.148 and its SSL certificate is issued by Let's Encrypt (YR2). Google Safe Browsing has flagged it for phishing, and it appears on 1 security blocklist. AlienVault OTX shows it is referenced in 1 threat intelligence pulse, confirming its malicious reputation.

As of the latest check, ocidente-virtua.live is offline, having been taken down following detection. The risk remains for users who may have visited the site before it was removed, as their credentials could have been compromised. PhishDestroy advises users to avoid interacting with any unsolicited communications referencing this domain and to enable two-factor authentication on their Google accounts. Regular monitoring of account activity is recommended to detect any unauthorized access.