Dear Vercel team
I am writing on behalf of eBirr to report a fraudulent phishing website hosted on your platform that is impersonating our company to collect sensitive personal information.
Fraudulent URL: https://esw-ebirr1-promotion.vercel.app/
This website is not authorized by eBirr and has no affiliation with our organization.
Evidence of Abuse:
The fraudulent application uses the eBirr name, branding, and visual identity without authorization to mimic our legitimate promotional process. It requests the following customer details under false pretenses:
- Ethiopian Mobile Number
- PIN
The site sends OTP verification codes and presents fake approval screens to harvest customer data. We have attached screenshots documenting this phishing workflow.
This activity constitutes clear brand impersonation, intellectual property infringement, and consumer fraud, directly violating Vercel Terms of Service and Acceptable Use Policy.
Immediate Actions Requested:
-
Suspend or disable the phishing application immediately.
-
Preserve all relevant evidence—including access, deployment, and runtime logs, source repository metadata, connection IP addresses, and associated domains—for law enforcement purposes.
-
Prevent the operator from redeploying similar phishing applications and investigate any additional services associated with the account.
Request for Account Information:
Given the active financial fraud, we request that Render preserve and, where legally permissible, provide information regarding the responsible account, including registration details, email address, deployment history, connected repository info, IP addresses, and billing information.
If privacy obligations restrict direct disclosure, please preserve this data for valid law enforcement requests.
Please confirm receipt of this report, provide an incident reference number, and update us on the actions taken.
Kind regards,