produbanprestayatarjetas[.]vercel[.]app

The domain produbanprestayatarjetas.vercel.app has been identified as a credential theft threat and is currently offline. The domain, likely used for targeted phishing attacks, attempted to deceive users into providing sensitive information by impersonating legitimate financial or service brands. Although the page is now displaying a 404: NOT_FOUND error, its past activity still poses potential risks to users who may have interacted with it while it was active.

The domain was registered through Tucows Domains Inc. and created on February 21, 2026, suggesting it was potentially set up for a specific fraudulent campaign. It resolves to the IP address 64.29.17.67 and was flagged as malicious by 17 out of 95 security vendors on VirusTotal, indicating significant suspicion within the cybersecurity community. Additionally, it appears on 2 security blocklists and is flagged by Google Safe Browsing for phishing activities. The SSL certificate is issued by Google Trust Services / WR1, which is often exploited to lend credibility to fraudulent domains.

Despite the domain's current offline status, users and security professionals should remain vigilant. It is recommended to add the domain to internal blocklists and educate potential targets on recognizing similar threats. Continuous monitoring for any reactivation or changes in status is advised, along with regular updates to security protocols to prevent credential theft. Organizations should ensure that employees and users are aware of how to identify phishing attempts and report suspicious domains for further investigation.