seguro-allianz-delta[.]vercel[.]app

This domain, seguro-allianz-delta.vercel.app, is flagged as an elevated-risk credential harvesting phishing infrastructure. Analysis indicates the site impersonates financial services entities to harvest user credentials, specifically targeting insurance or banking account logins through deceptive branding and social engineering tactics. The threat type is classified as generic_phishing with a focus on credential theft, posing significant risks to individuals and organizations through unauthorized account access and potential financial fraud. Infrastructure analysis reveals the following technical indicators: The domain is registered through Vercel Inc. and currently resolves to IP address 64.29.17.131, hosted on Amazon.com, Inc. (AS16509) in the United States. The SSL certificate is issued by Google Trust Services under the WR1 intermediate. The domain was created on March 04, 2026, and is currently offline with a page title reading 'Deployment Unavailable.' Security vendor detection on VirusTotal stands at 20 out of 95, and the domain appears on one security blocklist. Additional protective measures include blocking by enterprise phishing filters, though the domain remains accessible in cached or archived states. Mitigation steps for this threat type include immediate domain blacklisting across all network security layers, particularly email gateways and web proxies. Organizations should implement strict filtering for Vercel-hosted subdomains mimicking financial brands. End users should be educated on recognizing phishing indicators such as mismatched URLs, unexpected certificate authorities, and generic hosting platforms used for impersonation. Security teams are advised to monitor for credential reuse attempts from harvested accounts and implement multi-factor authentication as a compensating control. Historical DNS records should be preserved for forensic analysis, and affected users should be instructed to reset credentials through official channels only.