easy-bank-landing-page-gold[.]vercel[.]app

This domain, easy-bank-landing-page-gold.vercel.app, is identified as a high-risk credential theft operation impersonating Easybank, a financial services brand. Analysis indicates the page mimics the legitimate "Frontend Mentor | Easybank landing page" design, likely to harvest login credentials, financial details, or personal information from victims. No direct association with known crypto drainer kits or malware distribution was observed, but the domain’s structure and hosting align with typical phishing infrastructure targeting banking customers. Infrastructure analysis reveals the domain resolves to IP 64.29.17.195, hosted on Amazon.com, Inc. (AS16509) infrastructure in the United States. The SSL certificate is issued by Google Trust Services (WR1), a common feature in phishing campaigns to appear legitimate. VirusTotal detection shows 20 out of 95 security vendors flagging the domain as malicious. The domain is registered through Vercel Inc. and appears on two security blocklists: PhishDestroy and PhishingDB. No exact creation date was provided, but the domain remains active and unflagged by Google Safe Browsing at the time of analysis. Current status indicates the domain is still active and operational, posing an ongoing risk to users. Response actions should include immediate blocking of the domain and IP at the network level, along with monitoring for related indicators of compromise. Despite its presence on two blocklists, the domain’s low detection rate (21%) suggests it may evade some security controls. Organizations are advised to update endpoint protection rules, conduct user awareness training on credential theft tactics, and verify any recent interactions with the domain or associated IP address.