sucursalbogta[.]vercel[.]app

Analysis of sucursalbogta.vercel.app shows a newly registered domain (creation date February 21, 2026) that has been taken offline but remains flagged as a phishing site. The domain resolves to IP address 64.29.17.131, which belongs to Amazon.com, Inc. (AS16509) and is commonly used by Vercel hosting platforms. The SSL certificate is issued by Google Trust Services under the WR1 profile, a standard certificate for Vercel deployments. An HTTP request to the domain returns a 404 status with the page title "404: NOT_FOUND," indicating that no active landing page is currently served.

The registrar information lists Tucows Domains Inc. as the registration service. Threat intelligence shows that 15 of 93 VirusTotal security vendors have flagged the domain as malicious, and it appears on one external security blocklist. PhishDestroy has explicitly blocked the domain, confirming its association with phishing activity.

While the site is presently offline, the combination of recent registration, Amazon‑hosted infrastructure, Vercel technology, a Google‑issued certificate, and multiple vendor detections suggests intentional abuse. Defenders should continue to block the domain at perimeter controls, monitor the associated IP address for any future re‑activation, and add the domain to internal threat intelligence feeds. Ongoing observation of the registrar and hosting provider for similar patterns is recommended to pre‑empt further phishing deployments.