beneficioenlinearegistro-7e2bfd9b3de1[.]herokuapp[.]com

This domain is flagged with a high risk level due to its involvement in brand impersonation, specifically targeting Linea. The site, 'beneficioenlinearegistro-7e2bfd9b3de1.herokuapp.com', masquerades as Banco Promerica's online banking portal. The intent appears to be misleading users into providing sensitive information under false pretenses of interacting with a legitimate financial institution.

Analysis indicates that 16 out of 95 security vendors have identified this domain as a threat according to VirusTotal. The domain was created on May 20, 2026, and is registered through Salesforce.com, Inc. It resolves to the IP address 34.201.81.34, located in the US, specifically hosted on AWS EC2 (us-east-1). Google Safe Browsing currently flags the domain for phishing activities, and it appears on one known security blocklist. The SSL certificate is issued by Amazon, indicating the domain uses Amazon's RSA 2048 M01 encryption.

Mitigation steps include immediate blocking of this domain across network firewalls and end-user systems to prevent exposure to the phishing threat. Additionally, monitoring for further domain names with similar patterns that may target the same brand or utilize similar hosting infrastructure is advised. Security teams should ensure that up-to-date threat intelligence feeds are in place to detect and respond to such domains proactively. Users should be educated on recognizing phishing sites impersonating banking institutions to mitigate the risk of credential theft.