sblvtr[.]vercel[.]app

This domain, sblvtr.vercel.app, is flagged for brand_impersonation targeting State Bank of India (SBI). Analysis indicates the site presents a fraudulent PAN update page, designed to harvest sensitive financial credentials from unsuspecting users. The threat aligns with known tactics used in credential phishing campaigns, where attackers mimic legitimate banking portals to deceive victims into disclosing personal and financial information. Infrastructure analysis reveals the following technical indicators: the domain is registered through Vercel Inc. and resolves to IP address 64.29.17.67, hosted on Amazon.com, Inc. (AS16509) infrastructure in the United States. The domain was created on February 25, 2026, an anomalous future date suggesting potential obfuscation or misconfiguration. Security vendor detections on VirusTotal stand at 18/95, with the domain appearing on one security blocklist. The SSL certificate is issued by Google Trust Services (WR1), which, while legitimate, does not mitigate the fraudulent nature of the site. As of the latest assessment, sblvtr.vercel.app remains active, posing an ongoing risk to users. Response actions include blocking by at least one security provider, though broader mitigation requires user awareness and network-level filtering. The remaining risk is classified as high due to the domain's active status, low detection coverage, and direct impersonation of a major financial institution. Organizations are advised to implement DNS-based blocking for this domain and monitor for related indicators of compromise, such as unusual outbound connections to the identified IP address.