identidad-clientes[.]com

This domain, identidad-clientes.com, poses a targeted credential theft threat by impersonating Credicentro Coop, a recognized financial cooperative. Analysis indicates the site presents a fraudulent login interface designed to harvest user credentials, including usernames, passwords, and potentially multi-factor authentication codes. The page title explicitly displays 'Credicentro Coop,' reinforcing the social engineering tactic to deceive users into believing they are interacting with a legitimate financial institution. Such credential theft campaigns are frequently leveraged to facilitate unauthorized account access, financial fraud, or identity theft. Infrastructure analysis reveals multiple indicators of malicious activity. The domain was registered on June 25, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with high-risk domains. It resolves to the IP address 172.67.165.6, which is part of a network hosting other suspicious or confirmed phishing sites. Detection metrics from VirusTotal show that 1 out of 95 security vendors currently flag this domain as malicious, a low detection rate that may reflect evasion techniques or recent activation. The SSL certificate is issued by Google Trust Services, which, while legitimate, does not mitigate the domain's fraudulent intent. Users who have visited identidad-clientes.com or entered credentials on the site should take immediate remedial actions. First, revoke any active sessions on the legitimate Credicentro Coop platform and change passwords using a secure, unrelated device. Enable multi-factor authentication if not already active. Monitor financial accounts for unauthorized transactions and report suspicious activity to the legitimate institution. Additionally, scan the device used to access the domain for malware or unauthorized modifications. Organizations should block the domain and associated IP address at the network level to prevent further exposure.