easybank-landing-page-master-lime[.]vercel[.]app

This domain, easybank-landing-page-master-lime.vercel.app, is identified as an active banking phishing site designed to harvest financial credentials. Analysis indicates the domain mimics the legitimate Easybank brand, leveraging a frontend template titled 'Frontend Mentor | Easybank landing page' to deceive victims. No specific drainer kit signatures have been confirmed, but the infrastructure aligns with common phishing-as-a-service (PhaaS) deployments, suggesting potential automation in credential theft and exfiltration. Technical indicators confirm the domain's malicious nature. It is flagged by 18 out of 95 security vendors on VirusTotal, with two independent blocklists (PhishDestroy and PhishingDB) listing it as a confirmed threat. The domain resolves to IP address 216.198.79.195, hosted under AS16509 (Amazon.com, Inc.) in the United States. It is registered through Vercel Inc., a platform frequently abused for rapid phishing deployment due to its free hosting and SSL certificate issuance. The SSL certificate is issued by Google Trust Services (WR1), providing a false sense of legitimacy. No creation date is available, but the domain remains active and unmitigated. Current status indicates the phishing page is still operational, posing an ongoing risk to users. Response actions have been limited to blocklist inclusion, with no evidence of takedown or sinkholing. The remaining risk is classified as high due to the domain's persistence, SSL encryption, and direct targeting of financial credentials. Users are advised to avoid interaction, verify URLs against official Easybank domains, and report the domain to their security providers for further mitigation. Network-level blocking of the resolved IP (216.198.79.195) is recommended for organizations to prevent access.