seguridadincritada-weld[.]vercel[.]app

PhishDestroy identifies seguridadincritada-weld.vercel.app as an active credential theft campaign impersonating Banco Pichincha, a major Ecuadorian financial institution. The threat type is generic phishing, leveraging social engineering to trick victims into surrendering banking credentials under the guise of a 'Desembolso Verification' (Disbursement Verification) process. No drainer kit artifacts are associated with this domain in current feeds, indicating a focus on immediate credential harvesting rather than fund exfiltration frameworks.

This domain resolves to IP 64.29.17.3 and was registered through Vercel Inc., a legitimate cloud platform often abused for rapid deployment of phishing pages. VirusTotal confirms detection by 20 of 95 security vendors, with OpenPhish and Google Safe Browsing (GSB) flagging it under 'SOCIAL_ENGINEERING.' The domain appears on 1 security blocklist and holds a valid SSL certificate issued by Google Trust Services, increasing its deceptive credibility. These technical indicators confirm a high-risk infrastructure designed to evade casual scrutiny.

Current status shows an active campaign with the domain fully operational as of latest scans. Immediate response actions include domain takedown requests to Vercel and continued blocking via security platforms. Despite these efforts, the domain remains accessible and continues to receive traffic, posing a persistent risk to users unfamiliar with Banco Pichincha’s legitimate domains. Users are advised to verify URLs manually and report suspicious activity to their banking provider or via GSB’s reporting tools.