serviemprende2026[.]vercel[.]app

Analysis of serviemprende2026.vercel.app shows a high‑risk generic phishing operation that remains active as of July 19, 2026. The domain is registered through Vercel and resolves to IP 216.198.79.3, an address attributed to Lefkoff Industries in the United States. Google Safe Browsing classifies the site as social engineering, and 20 of 91 security vendors on VirusTotal have flagged the domain. PhishDestroy has already blocked it, and it appears on an additional security blocklist. The site serves a page titled "Solicitud de Tarjeta - Banco Pichincha" and returns HTTP 200, indicating that a malicious form targeting Banco Pichincha customers is reachable. The SSL certificate is issued by Google Trust Services (WR1), confirming the use of standard TLS without providing any indication of credential‑stealing capabilities beyond the observed page title. No further infrastructure such as email servers, additional hosting services, or content delivery networks has been disclosed. Defenders should immediately block the domain and its associated IP address at network perimeters, add the URL to URL filtering lists, and monitor for any related traffic patterns. Users of Banco Pichincha should be warned about unsolicited card‑application requests and instructed to verify legitimate communications through official channels. Continuous monitoring of Vercel‑hosted domains targeting financial institutions is recommended to detect similar threats promptly.