autoimportferia[.]vercel[.]app

This report analyzes the domain autoimportferia.vercel.app. The site presents a page titled "BHD | Personas," which is a clear impersonation of the BHD financial brand. The primary threat is phishing, as the site likely attempts to capture user credentials or personal information by mimicking the legitimate BHD portal.

Technical analysis reveals significant red flags. VirusTotal shows 4 out of 95 vendors (alphaMountain.ai, Gridinsoft, Sophos, Webroot) flagging the site as malicious. The domain is registered with Vercel Inc., hosted at IP 216.198.79.67 (US, AS16509 Amazon.com, Inc.), and uses a Google Trust Services SSL certificate (WR1). The nameservers are listed as NS_NOT_FOUND, and the domain status is ACTIVE. GridinSoft assigns a trust score of 0/100, and the DOM risk score is 91. Cloaking via "content_split" was detected, indicating the site serves different content to security scanners versus normal users.

The domain is currently active and presents a high risk to users, particularly those expecting to access BHD financial services. The combination of brand impersonation, low trust score, high risk score, and cloaking technique strongly indicates an active phishing campaign. Users should be advised to avoid the site entirely.