qnasndnasn[.]vercel[.]app

This domain, qnasndnasn.vercel.app, poses a high-risk brand impersonation threat specifically targeting QNB (Qatar National Bank) customers. The site displays a fraudulent login page titled 'QNB Finansbank İnternet Şubesi,' designed to harvest banking credentials from unsuspecting users. Visitors entering their login details risk immediate account compromise, unauthorized transactions, and potential financial loss through subsequent fraudulent activity. Analysis indicates this domain was registered on May 08, 2024, through Vercel's hosting infrastructure. Security vendor detection shows 17 out of 95 engines on VirusTotal flagging the domain as malicious, with one confirmed blocklist entry. The site resolves to IP address 64.29.17.3, hosted in the United States under Vercel, Inc. infrastructure. The SSL certificate is issued by Google Trust Services (WR1), which while legitimate, is commonly exploited by threat actors to lend false credibility to phishing sites. If you have visited qnasndnasn.vercel.app or entered any credentials, immediate action is required. First, terminate any active sessions on the device used to access the site. Next, change your QNB online banking password through the official mobile app or verified website (qnb.com.tr). Enable multi-factor authentication if not already active. Monitor all linked accounts for unauthorized transactions and report any suspicious activity to QNB's official fraud department. Consider running a full antivirus scan on the affected device to detect potential malware infections that may have been delivered through the phishing site.