easybank-project[.]vercel[.]app

This domain, easybank-project.vercel.app, is an active credential theft phishing site targeting users of EasyBank. Analysis indicates the page mimics legitimate banking login portals to harvest credentials, classified as a high-risk threat due to its operational status and targeting of financial services. The domain remains accessible as of this report, posing an immediate risk to unsuspecting users. Infrastructure analysis reveals the domain is hosted on IP address 216.198.79.67, located within the United States under AS16509 (Amazon.com, Inc.). The SSL certificate is issued by Google Trust Services (WR1), a common tactic to lend false legitimacy. The domain is registered through Vercel Inc. and has been flagged by 24 of 95 security vendors on VirusTotal, with detections from two independent blocklists: PhishDestroy and PhishingDB. The page title, 'Frontend Mentor | Easybank landing page,' suggests an attempt to disguise the malicious intent under the guise of a development or educational project. Current status confirms the domain remains active and unmitigated. Users are advised to avoid interaction with easybank-project.vercel.app and any associated links. Financial institutions and security teams should update blocklists to include this domain and its resolving IP. Individuals who may have entered credentials are urged to reset passwords immediately and monitor accounts for unauthorized activity. Network-level protections should be implemented to prevent access to this infrastructure.