will-bank-rho[.]vercel[.]app

The domain will-bank-rho.vercel.app is identified as a banking phishing site, posing a significant risk to users who may inadvertently visit it. The site is currently taken offline, which reduces the immediate threat but does not eliminate the risk of its reactivation or use in future campaigns. As of the latest assessment, no specific brand or drainer kit has been identified as being impersonated or utilized by this domain.

Technical indicators for will-bank-rho.vercel.app include a detection by 1 of 95 vendors on VirusTotal, including Trustwave, and its appearance on 1 security blocklist, specifically PhishDestroy. The domain is registered through Tucows Domains Inc. and was created on February 21, 2026. It resolves to the IP address 64.29.17.195, which is located in the United States and is part of the AS16509 Amazon.com, Inc. network. The SSL certificate for the domain is issued by Google Trust Services / WR1. The observed page title is 'Deployment Unavailable', and the HTTP status code is 451, indicating that the site is currently unavailable.

To protect against potential banking phishing scams, users should change their passwords and enable two-factor authentication on their accounts. They should also monitor their accounts for any signs of unauthorized activity. If users suspect they have been targeted by or have interacted with will-bank-rho.vercel.app, they should report the incident to their financial institution and to the relevant authorities. Reporting the domain to platforms like Google Safe Browsing and other security organizations can also help prevent further victimization.