easybank-landing-page-pearl[.]vercel[.]app

This domain, easybank-landing-page-pearl.vercel.app, is suspected of engaging in credential theft, impersonating the brand Easybank. The domain is registered through Vercel Inc., a cloud-based development platform known for hosting legitimate applications, but it has been leveraged for malicious purposes in this case.

Infrastructure analysis reveals that the domain has a VirusTotal score of 18/95, indicating a significant number of security vendors flag it as malicious. It is registered through Vercel Inc. and resolves to the IP address 64.29.17.67, which is located in the United States and is part of the AS16509 Amazon.com, Inc. network. The domain appears on two security blocklists, including PhishDestroy and PhishingDB. The SSL certificate is issued by Google Trust Services / WR1, which might be used to instill a false sense of security in users. The creation date is not provided, but the domain's recent activity and high VirusTotal score suggest it is a recent threat.

The domain remains active, posing a high risk to users who may be tricked into providing their credentials. Immediate actions should include blocking the domain at the network level and educating users about the dangers of credential theft through phishing. Despite these measures, the risk remains significant due to the domain's continued activity and its appearance on multiple blocklists. Users are advised to verify the authenticity of the Easybank website and report any suspicious activity to their security teams.