easybank-two[.]vercel[.]app

This domain, easybank-two.vercel.app, is identified as a high-risk banking phishing resource targeting users of Easy-Bank. Analysis indicates the page employs a fake login portal designed to harvest credentials, likely leveraging a phishing kit tailored for financial institutions. The page title, 'Easy-Bank,' directly mimics the legitimate brand, increasing the likelihood of successful deception among targeted users. Technical indicators confirm the domain's malicious nature. VirusTotal detection shows 19 out of 95 security vendors flagging the domain as malicious. The domain is registered through Vercel Inc. and resolves to the IP address 64.29.17.3, hosted on infrastructure belonging to Amazon.com, Inc. (AS16509) in the United States. The SSL certificate is issued by Google Trust Services (WR1), a common tactic to lend false legitimacy. The domain appears on two security blocklists, and additional intelligence sources, including PhishDestroy and PhishingDB, have blocked it. As of the latest verification, easybank-two.vercel.app remains active, posing an ongoing threat to users. Immediate mitigation actions include blocking the domain and associated IP at the network perimeter, as well as notifying affected stakeholders. Despite existing detections, the domain's continued operation underscores the need for heightened vigilance, particularly among users of financial services. Organizations are advised to monitor for credential theft attempts originating from this infrastructure and to educate users on recognizing phishing indicators, such as mismatched URLs and unsolicited login requests.