bancaprovincia[.]gl-assurance[.]com

This domain, bancaprovincia.gl-assurance.com, is identified as a credential phishing site designed to harvest sensitive login information from visitors. The page mimics legitimate banking portals, displaying a login interface titled 'Acceder' to deceive users into entering account credentials. Such phishing campaigns are commonly used to facilitate unauthorized access to financial accounts, leading to potential fraud or identity theft. Analysis indicates this domain was registered on February 28, 2026, through Webcentral Group Ltd, an unusual registrar choice for financial institutions. It resolves to the IP address 190.8.176.86, hosted under AS36454 (WHG Hosting Services Ltd) in the United States. The domain lacks an SSL certificate, a critical security red flag. Security vendors on VirusTotal have flagged this domain, with 21 out of 95 engines detecting it as malicious. Additionally, it appears on one security blocklist and is actively blocked by anti-phishing systems. If you visited bancaprovincia.gl-assurance.com or entered any credentials, immediate action is required. First, change the passwords for any accounts accessed through the site, prioritizing financial or email accounts. Enable multi-factor authentication where available to add an extra layer of security. Monitor account statements for unauthorized transactions and report any suspicious activity to the relevant financial institution. Consider running a full security scan on your device to detect potential malware or keyloggers that may have been installed during the visit.