app-gestion-servicioweb[.]com

The domain app-gestion-servicioweb.com is identified as a brand impersonation phishing site targeting Credicentro Coop, a financial cooperative. Analysis confirms the domain was designed to deceive users into submitting credentials or sensitive financial information by mimicking the legitimate Credicentro Coop platform. As of the latest assessment, the domain has been taken offline, though prior activity remains a documented threat. Infrastructure analysis reveals the domain was registered on February 21, 2026, through NiceNIC International Group Co., Limited, a registrar frequently associated with high-risk domains. It resolved to the IP address 172.67.159.218, which is part of a network range known for hosting malicious content. Detection metrics indicate the domain was flagged by 5 of 95 security vendors on VirusTotal, while appearing on one security blocklist. The Gridinsoft trust score for this domain is 0 out of 100, reinforcing its classification as a high-risk entity. Technologies detected include WordPress, MySQL, PHP, Nginx, and HSTS, suggesting a structured phishing framework designed to appear legitimate. The domain is currently offline, reducing immediate risk to end users. However, organizations and individuals are advised to remain vigilant for similar impersonation attempts. Network administrators should block the domain and associated IP address 172.67.159.218 at the perimeter level. Users who may have interacted with the domain are urged to reset credentials immediately, particularly those associated with financial services. Monitoring for unauthorized transactions and implementing multi-factor authentication on critical accounts is strongly recommended to mitigate potential compromise.