easy-bank-sigma[.]vercel[.]app

This domain, easy-bank-sigma.vercel.app, is classified as a high-risk banking phishing threat targeting financial credentials. Analysis indicates it operates as a fraudulent login portal for a financial institution, designed to harvest user authentication details through deceptive mimicry of legitimate banking interfaces. The threat type specifically involves credential theft via fake banking portals, posing significant risks to individuals and organizations handling sensitive financial data. Infrastructure analysis reveals multiple technical indicators supporting its malicious classification. The domain was registered through Tucows Domains Inc. and resolves to the IP address 216.198.79.131. Detection metrics show 15 out of 95 security vendors on VirusTotal flagging the domain as malicious, while Gridinsoft assigns a trust score of 0/100. The domain appears on one security blocklist and was created on February 21, 2026, an anomalous future date suggesting potential domain spoofing or registry manipulation. Technologies detected include Vercel hosting and HTTP Strict Transport Security (HSTS), with an SSL certificate issued by Google Trust Services, which may lend false legitimacy to the phishing attempt. Mitigation against this banking phishing threat requires immediate action from both end-users and security teams. Users should avoid interacting with the domain, particularly entering credentials or financial information. Security teams are advised to block the domain and its resolving IP (216.198.79.131) at the network perimeter, update endpoint protection signatures, and monitor for credential reuse attempts. Financial institutions should alert customers about this specific phishing campaign and reinforce multi-factor authentication (MFA) requirements. Given the domain's active status and high-risk classification, continuous monitoring for related infrastructure or similar phishing variants is recommended.