easybank-landing-page-akashsharma[.]vercel[.]app

This domain is flagged as a high-risk credential theft phishing site designed to harvest banking login details from unsuspecting users. Analysis indicates the page impersonates Easybank, a legitimate financial institution, to deceive victims into entering sensitive credentials. The threat type is highly targeted, focusing on financial fraud through stolen authentication details. Infrastructure analysis reveals the domain is hosted on Vercel Inc. infrastructure, resolving to IP address 216.198.79.195 (US, AS16509 Amazon.com, Inc.). VirusTotal detection shows 20 out of 95 security vendors flagging the domain as malicious. The domain appears on two security blocklists (PhishDestroy and PhishingDB) and remains active at the time of assessment. The SSL certificate is issued by Google Trust Services (WR1), which does not mitigate the inherent risk of credential theft. No legitimate association with Easybank or its official services has been verified. Mitigation steps for this credential theft phishing threat include immediate blocking of the domain and its resolving IP (216.198.79.195) at the network perimeter. Security teams should deploy indicators of compromise (IOCs) across endpoint detection systems to prevent user access. Financial institutions and users should be alerted to verify URLs before entering credentials, particularly those hosted on third-party platforms like Vercel. Monitoring for similar domains using the same registrar or IP range is recommended to identify related threats. Credential reset protocols should be enforced for any accounts potentially exposed to this campaign.