bfgt[.]vercel[.]app

This domain is flagged with an elevated risk level due to activities indicative of brand impersonation, specifically targeting the State Bank of India. The page titled 'State Bank of India | PAN Update' suggests potential malicious intent to mislead users into divulging sensitive information under the guise of an official bank request.

Detailed analysis of bfgt.vercel.app reveals multiple indicators of compromise. The domain is flagged by 20 out of 95 security vendors on VirusTotal, highlighting significant concerns regarding its legitimacy. The domain was registered through Vercel Inc. and is associated with the IP address 216.198.79.67, located within the United States and managed by AS16509 Amazon.com, Inc. Additionally, the domain appears on two security blocklists and has been blocked by PhishDestroy and PhishingDB, underscoring its reputation as a phishing threat. The SSL certificate issued by Google Trust Services / WR1, while generally trusted, does not mitigate the risk associated with the site's intention.

To mitigate the risks associated with such brand impersonation threats, it is crucial to remain vigilant and verify the authenticity of messages or requests purportedly from financial institutions. Users should avoid clicking on links from unknown sources and directly access official websites for any updates or transactions. Organizations should consider implementing email filtering solutions to detect and block phishing attempts and educate employees and users about recognizing fraudulent communications. Regular monitoring of DNS records for suspicious registrations can also help in early detection and prevention of phishing domains.