bcrsline[.]vercel[.]app

This domain, bcrsline.vercel.app, poses as an official BCR (Romanian Commercial Bank) online banking portal to deceive users into entering sensitive credentials. The site mimics legitimate banking interfaces, likely harvesting login details, personal identification numbers, and financial information for unauthorized account access or fraudulent transactions. Given its recent creation and active status, this infrastructure is designed to exploit trust in financial institutions, particularly targeting customers familiar with BCR's digital services. Analysis indicates the domain was registered on April 8, 2026, through Vercel Inc., a platform commonly used for rapid deployment of web applications. Security vendors have flagged the domain as malicious, with 19 out of 95 engines on VirusTotal detecting it as phishing-related. The site resolves to the IP address 64.29.17.131, hosted in the United States under Vercel's infrastructure. Its SSL certificate, issued by Google Trust Services, further lends a false sense of legitimacy, while its presence on one security blocklist confirms its classification as a confirmed threat. If you or someone else has interacted with bcrsline.vercel.app, immediate action is required. First, cease all interaction with the site and do not enter any additional information. If credentials were submitted, contact BCR's official support channels to report the incident and initiate account security protocols, such as password resets and transaction monitoring. Enable multi-factor authentication on all financial accounts if not already active. Monitor bank statements for unauthorized activity and consider placing a fraud alert with credit bureaus if personal data was exposed. Finally, report the domain to local cybersecurity authorities or anti-phishing organizations to aid in broader mitigation efforts.