departamentodetransiteguiassc[.]vercel[.]app

PhishDestroy identifies departamentodetransiteguiassc.vercel.app as a potential credential theft domain designed to harvest user login details under the guise of a transit authority guide. This site mimics legitimate government portals, tricking visitors into surrendering sensitive credentials such as usernames, passwords, or national ID numbers. The threat actor behind this operation likely aims to sell or exploit stolen data for fraudulent financial transactions or identity theft. The domain’s rapid deployment and lack of detection on VirusTotal suggest a newly active campaign actively evading initial security scans. This domain was flagged with 0 detections out of 95 VirusTotal scans, indicating it has not yet been widely recognized by antivirus engines. It is registered through Vercel Inc. and resolves to IP 64.29.17.195, which hosts multiple suspicious domains. The SSL certificate issued by Google Trust Services lends a false sense of legitimacy, while the recent creation and clean VirusTotal score allow the threat actor to operate undetected for now. Blocklist monitoring remains critical, as early-stage domains often fly under the radar before being added to threat intelligence feeds. If you visited this site, immediately change any passwords you may have entered and monitor your accounts for unauthorized access. Do not use the same credentials on other platforms. Report the domain to your browser vendor or security team and consider running a full antivirus scan. Avoid clicking any links or downloading files from this page. Stay alert for phishing emails referencing this domain, as your information may be sold to cybercriminals targeting further attacks.