ingresarprodubanco-ec[.]vercel[.]app

This domain, ingresarprodubanco-ec.vercel.app, is actively engaged in credential harvesting through a fraudulent login portal targeting Produbanco customers. Analysis indicates the threat type as generic phishing with high-risk classification. The domain remains operational as of the latest verification, presenting an immediate risk to users attempting to access legitimate banking services. Infrastructure analysis reveals the domain is hosted on IP address 64.29.17.3, associated with AS16509 (Amazon.com, Inc.) in the United States. The site is registered through Vercel Inc. and secured with an SSL certificate issued by Google Trust Services (WR1). Security vendor detection shows 20 of 95 engines on VirusTotal flag the domain as malicious. Additionally, the domain appears on one security blocklist and is explicitly identified as phishing by Google Safe Browsing. The page title, 'Produbanco - Login,' directly mimics the legitimate bank’s authentication interface to deceive users. Current status confirms the domain remains active and unmitigated. Organizations and individuals are advised to block the domain at the DNS level and the associated IP address (64.29.17.3) within network security controls. Users should be alerted to verify the authenticity of banking portals by checking the URL for official domains and looking for HTTPS indicators from trusted certificate authorities. Financial institutions are recommended to monitor for credential leaks associated with this domain and initiate password reset protocols for affected accounts.