ebay-seller-center-managedpayments[.]vercel[.]app

Analysis of ebay-seller-center-managedpayments.vercel.app indicates a high-risk brand impersonation domain targeting eBay users. The domain, registered under Vercel Inc., presents a page titled 'Sign in or Register | eBay,' suggesting an attempt to harvest eBay credentials. As of July 12, 2026, the domain remains active and resolves to IP address 64.29.17.131. Security vendor detections on VirusTotal report 16 of 95 engines flagging the domain, while it appears on two security blocklists (PhishDestroy and PhishingDB). The domain was created on September 11, 2021, and uses an SSL certificate issued by Google Trust Services. Gridinsoft and Scamadviser both assign a trust score of 1/100 or lower, reinforcing its malicious classification. Infrastructure analysis reveals the use of Vercel hosting and HSTS implementation, which may be leveraged to lend an appearance of legitimacy. The exact content of the phishing page has not been analyzed, but the presence of an eBay-branded login title aligns with credential theft objectives. Defenders should treat this domain as an active threat, block it at the network level, and monitor for connections to 64.29.17.131. No evidence of a phishing kit or additional payload delivery has been confirmed at this time. Further investigation into associated infrastructure and historical activity is recommended to assess the full scope of the campaign.