controlloc[.]digital

The domain controlloc.digital has been identified as a credential theft threat and is currently offline. It impersonates a legitimate management system with the title 'ControlLoc - Sistema de Gestão de Aluguéis para Imobiliárias', aiming to deceive users into submitting sensitive information. This domain poses an elevated risk due to its potential for significant data theft and unauthorized access to users' credentials.

Analysis of the domain reveals that it was flagged by 4 out of 95 security vendors on VirusTotal, indicating a level of recognition among established threat detection platforms. The domain was registered through NiceNIC International Group Co., Limited, with an SSL certificate issued by Google Trust Services, which may lend a false sense of security to unsuspecting users. The domain resolves to IP address 172.67.166.243 and was created on February 22, 2026, suggesting it is a relatively new infrastructure. Additionally, it appears on one security blocklist and has a Gridinsoft trust score of 0/100, further emphasizing its malicious nature. The domain utilizes technologies such as Google Sign-in, HSTS, Google Analytics, Facebook Pixel, Cloudflare Browser Insights, Cloudflare, and HTTP/3, which may be part of its deceptive tactics.

Given the current offline status of controlloc.digital, its immediate threat level is reduced; however, the potential for reactivation or replication on different platforms remains. Entities should ensure robust network defenses, including updated blocklists and security vendor subscriptions, to mitigate risks from similar threats. Users are advised to exercise caution with emails or links purporting to be from ControlLoc, verifying the authenticity of the source before entering any credentials. Continuous monitoring of threat intelligence feeds and collaboration with cybersecurity professionals is recommended to preemptively address any resurgence of this or related threats.