easybank-landing-page-fem[.]vercel[.]app

PhishDestroy has identified a high-risk banking phishing campaign targeting users of Easybank, hosted at the domain easybank-landing-page-fem.vercel.app. This threat is specifically designed for credential theft, luring victims with a fake landing page that mimics the legitimate Easybank interface. The domain is currently active and poses an immediate risk to anyone who encounters it. By impersonating a trusted financial brand, the attackers aim to harvest sensitive login credentials and personal information from unsuspecting users.

Technical analysis reveals that the domain resolves to IP address 64.29.17.131 and is registered through Vercel Inc. The domain was created on January 28, 2020, and is secured with an SSL certificate issued by Google Trust Services / WR1, which gives it a false sense of legitimacy. VirusTotal analysis shows that 18 out of 95 security vendors flag this domain as malicious, and it appears on 2 security blocklists. These indicators confirm the domain's involvement in phishing activities, with a high risk score due to the combination of brand impersonation and active status.

Given the active nature of this threat, PhishDestroy strongly advises users to avoid interacting with the domain or any links pointing to it. If you have already entered credentials on this page, change your Easybank password immediately and contact your bank's security team. Enable two-factor authentication on your accounts and monitor for suspicious activity. Report the domain to your email provider or security tools to prevent further exposure. Stay vigilant against unsolicited communications directing you to banking sites, and always verify URLs before entering sensitive information.