comprobar--servicios2026[.]replit[.]app

The domain comprobar--servicios2026.replit.app is assessed as having an elevated risk level for generic phishing. This domain poses a specific threat by mimicking the page title 'Bancoagrícola,' which could deceive users into believing they are interacting with a legitimate banking service.

Analysis indicates that comprobar--servicios2026.replit.app is currently offline and was registered through Replit. The domain resolves to the IP address 34.117.33.233 and is flagged by 16 out of 95 security vendors on VirusTotal. The SSL certificate is issued by Google Trust Services / WR3, which could lend a false sense of security to potential victims. The domain appears on one known security blocklist, suggesting it has been involved in malicious activities. The creation date is not explicitly provided, but the presence of a unique seed 'cf5acd' implies that the domain may have been part of a batch of similarly created phishing sites. The low trust score and presence on blocklists further reinforce the domain's malicious intent.

To mitigate the risks associated with this domain, users should avoid clicking on any links or entering personal information when encountering a page titled 'Bancoagrícola' or similar variations. Organizations should update their security policies to block access to this domain and educate employees about the signs of phishing, such as suspicious URLs and unexpected page titles. Network administrators should monitor for and block traffic to 34.117.33.233, and security teams should integrate this domain into their threat intelligence feeds to ensure proactive detection and response.