easybank-landing-page-eight-psi[.]vercel[.]app

This domain, easybank-landing-page-eight-psi.vercel.app, is identified as a high-risk banking phishing site designed to impersonate the Easybank brand. Analysis indicates the page presents a fraudulent login interface, likely harvesting user credentials for unauthorized account access. The domain mimics legitimate banking portals, using visual and structural elements consistent with Easybank's official branding to deceive victims. No crypto drainer or malware payloads were observed in initial scans, focusing solely on credential theft. Infrastructure analysis reveals the following technical indicators: the domain resolves to IP 216.198.79.67, hosted on Amazon.com, Inc. (AS16509) infrastructure in the United States. The SSL certificate is issued by Google Trust Services (WR1), a common tactic to appear legitimate. VirusTotal detection score stands at 17/95 security vendors, with blocklist presence confirmed on two sources: PhishDestroy and PhishingDB. The domain is registered through Vercel Inc., a platform frequently abused for rapid deployment of phishing pages. No creation date was provided in available intelligence, but the domain remains active and unlisted in Google Safe Browsing at the time of analysis. Current status indicates the phishing page is still operational, posing an ongoing threat to users. Response actions should include immediate blocking of the domain and IP at network perimeter defenses, as well as credential reset protocols for any users who may have interacted with the site. Despite blocklist presence, the domain's active status and low detection rate (17/95) suggest it may evade some automated defenses. Users are advised to verify domain authenticity before entering credentials, particularly for financial services, and to report any suspicious activity to their financial institution. Network administrators should monitor for connections to 216.198.79.67 and implement DNS-based blocking for the domain.