nelienaei-7837--lineasnejj2[.]replit[.]app

This domain, nelienaei-7837--lineasnejj2.replit.app, operates as a high-risk brand impersonation scheme targeting Linea users with a fraudulent credit evaluation page. The site presents itself as "Evaluación de Crédito | Banco Pichincha," a financial institution, to deceive visitors into submitting sensitive personal and financial information. Analysis indicates the domain is designed to harvest credentials, payment details, or other confidential data under false pretenses, exploiting trust in both Linea and Banco Pichincha branding. The threat is classified as brand impersonation with social engineering tactics, as confirmed by Google Safe Browsing’s SOCIAL_ENGINEERING flag.

Technical evidence underscores the domain’s malicious intent. VirusTotal reports 6 out of 95 security vendors flagging the domain as malicious, while the SSL certificate is issued by Google Trust Services, a common obfuscation tactic to appear legitimate. The domain resolves to IP address 34.117.33.233, hosted on infrastructure that has been previously associated with phishing campaigns. No legitimate registration details or creation date are publicly available, further indicating an attempt to conceal ownership. The domain remains active, with no takedown observed as of the latest verification.

Users who have interacted with nelienaei-7837--lineasnejj2.replit.app should take immediate action to mitigate risk. First, cease all interaction with the domain and avoid entering any credentials or personal data. If login details or financial information were submitted, affected accounts should be locked, and passwords reset using a secure, unrelated device. Enable multi-factor authentication where possible and monitor accounts for unauthorized transactions or activity. Report the incident to the targeted brand’s security team (Linea) and relevant financial institutions to initiate fraud protection protocols. Additionally, scan the device used to access the domain for malware, as phishing sites may deploy secondary payloads.