bankofamerica-am[.]vercel[.]app

Analysis of the domain bankofamerica-am.vercel.app indicates it is a confirmed phishing infrastructure impersonating Bank of America, currently offline as of July 25, 2026. The domain was registered through Vercel Inc. on January 28, 2020, and resolves to the IP address 216.198.79.67, hosted on Amazon.com, Inc.'s network (AS16509) in the United States. Nameservers are provided by Vercel (ns1.vercel-dns-3.com through ns4.vercel-dns-3.com), and the SSL certificate is issued by Google Trust Services under the WR1 intermediate. The domain's page title, 'Bank of America — Homepage,' directly aligns with the targeted brand, reinforcing its classification as a banking phishing scam.

Security vendors have flagged this domain, with 17 out of 93 engines on VirusTotal detecting it as malicious. It appears on at least one security blocklist and is blocked by PhishDestroy. Scamadviser assigned a trust score of 1 out of 100, further supporting its malicious classification. The HTTP status code 451, indicating legal restrictions or takedown, confirms the domain is no longer accessible.

While the exact content of the phishing page remains unanalyzed, the available evidence—including the page title, brand impersonation, and detection by multiple security vendors—leaves no uncertainty about its fraudulent intent. Defenders should treat this domain as part of a phishing campaign targeting Bank of America customers. Given its current offline status, no immediate user exposure is expected, but security teams should monitor for re-activation or similar domains leveraging Vercel hosting. The use of a legitimate hosting provider (Vercel) and a valid SSL certificate underscores the need for layered detection, including domain reputation checks and behavioral analysis, to mitigate brand impersonation threats.