itauclientes[.]vercel[.]app

The domain itauclientes.vercel.app is currently active and serves a page whose title is “Banco Itaú - Paraguay”. DNS resolution returns the address 64.29.17.67, which is hosted by Vercel, Inc. in the United States and the domain was provisioned through Vercel’s registration service. The site presents a valid TLS certificate issued by Google Trust Services under the WR1 intermediate, indicating that HTTPS connections are correctly encrypted. Google Safe Browsing classifies the URL as a social‑engineering threat, and VirusTotal records show that 18 of 91 security scanners have flagged the host as malicious. The domain is listed on one external blocklist and is actively blocked by the PhishDestroy feed. HTTP requests receive a 200 response, confirming that the web server is reachable. While the page title suggests an attempt to impersonate a Paraguayan branch of Banco Itaú, the full page content has not been disclosed, leaving the exact credential‑harvesting mechanism unknown. Defenders should add the domain and its IP address to deny‑list rules, monitor for related Vercel‑hosted subdomains, and consider updating web‑filter policies to block URLs flagged by Google Safe Browsing. Continuous observation is advised to detect any changes in hosting or additional indicators that may arise.