easybank-landing-page-redo[.]vercel[.]app

This domain, easybank-landing-page-redo.vercel.app, is identified as a high-risk banking phishing resource actively impersonating Easybank, a legitimate financial institution. The domain is currently operational and designed to harvest sensitive credentials, including login details and financial information, from unsuspecting users. Analysis confirms its association with fraudulent activity targeting online banking customers. Infrastructure analysis reveals the domain is registered through Vercel Inc. and resolves to the IP address 216.198.79.67, located within the United States under AS16509 (Amazon.com, Inc.). The SSL certificate is issued by Google Trust Services (WR1), a common provider for both legitimate and malicious domains. The domain appears on two security blocklists, including PhishDestroy and PhishingDB. VirusTotal detection metrics indicate that 19 out of 95 security vendors have flagged this domain as malicious, reflecting a significant consensus within the cybersecurity community regarding its threat status. The page title, "Frontend Mentor | Easybank," further suggests an attempt to mimic the branding and presentation of the legitimate Easybank platform. The domain remains active as of the latest verification, posing an ongoing risk to users who may inadvertently interact with it. Organizations and individuals are advised to block this domain at the network level and update endpoint protection rules to prevent access. Users who may have entered credentials on this site should immediately reset their passwords and enable multi-factor authentication on their legitimate banking accounts. Financial institutions are recommended to monitor for unauthorized access attempts linked to this phishing campaign and issue alerts to customers regarding this specific threat. Proactive measures, including DNS filtering and real-time threat intelligence integration, are critical to mitigating exposure to this and similar phishing domains.