easybank-sage[.]vercel[.]app

This domain, easybank-sage.vercel.app, is flagged as a high-risk phishing site specifically designed to harvest banking credentials through a fake login portal. Analysis indicates it impersonates EasyBank, a financial services brand, by presenting a fabricated login interface that mimics legitimate banking portals. The site does not appear to deploy a known crypto drainer kit but focuses on credential theft through social engineering tactics, including the use of a deceptive landing page titled 'Frontend Mentor | Easybank landing page' to lend false legitimacy. Technical indicators confirm the malicious nature of this domain. It is registered through Vercel Inc. and was created on March 08, 2026, an anomalous future date suggesting domain age manipulation or a data entry error. The domain resolves to IP address 216.198.79.3, hosted under AS16509 (Amazon.com, Inc.) in the United States. VirusTotal detection shows 17 out of 95 security vendors flagging the domain as malicious. The domain appears on one security blocklist and is actively blocked by at least one threat intelligence feed. The SSL certificate is issued by Google Trust Services (WR1), a common certificate authority used by both legitimate and malicious sites to enable HTTPS connections. As of the latest verification, easybank-sage.vercel.app remains active and accessible, posing an ongoing risk to users. No takedown or sinkholing actions have been observed, and the domain continues to resolve to its hosting IP. Users are advised to treat any interaction with this domain as a direct threat to financial security. Organizations should update web filters to block the domain and IP, while individuals should avoid entering credentials or personal information on the site. Given the high detection rate and active status, this domain warrants immediate inclusion in endpoint protection and network security policies.