easybank-landing-page-gamma[.]vercel[.]app

The domain easybank-landing-page-gamma.vercel.app is confirmed as a high-risk banking phishing site. The domain mimics the landing page of Easybank, a known financial institution, to trick users into divulging sensitive information. No specific drainer kit has been identified, but the site utilizes a reputable platform, Vercel Inc., to host its content, which may lend an air of legitimacy to unsuspecting visitors.

Technical analysis reveals that the domain has been flagged by 20 out of 95 security vendors on VirusTotal. The domain is registered through Vercel Inc. and resolves to the IP address 216.198.79.3, which is located in the United States and is part of the AS16509 network operated by Amazon.com, Inc. The SSL certificate is issued by Google Trust Services / WR1, adding another layer of perceived authenticity. The site appears on two security blocklists: PhishDestroy and PhishingDB. As of the current analysis, the domain is still active and poses a significant threat to users.

Current status indicates that the site remains active, and it is recommended that users avoid accessing this domain to prevent potential financial loss or identity theft. Security teams and ISPs should consider blocking the domain and associated IP address to mitigate further risk. Continuous monitoring is advised to track any changes in the site's activity or infrastructure.