easybank-landing-page-fm[.]vercel[.]app

The domain easybank-landing-page-fm.vercel.app is currently active and flagged as malicious by 18 out of 95 vendors on VirusTotal. This indicates a significant level of detection across multiple security platforms. The site is associated with a banking phishing operation, aiming to deceive users into providing sensitive financial information by mimicking legitimate banking interfaces.

PhishDestroy first identified this domain on December 20, 2025, and it is already listed on two public blocklists, including PhishDestroy and PhishingDB. The site is hosted on Vercel Inc.'s infrastructure, with an IP address linked to Amazon's ASN, indicating a robust cloud hosting environment. Despite its active status, the domain's SSL certificate is issued by Google Trust Services, which might lend an air of legitimacy to unsuspecting visitors.

The phishing operation exploits the trust associated with the Easybank brand, using a landing page titled 'Frontend Mentor | Easybank landing page' to lure victims. By leveraging a professional-looking interface, the attackers increase the likelihood of capturing user credentials. The presence of the domain on multiple blocklists and its detection by numerous security vendors underscores the threat it poses to users. Organizations should remain aware of such threats and ensure their security measures are up to date to prevent potential breaches.