easy-bank-landing-page-weblytic[.]vercel[.]app

This domain, easy-bank-landing-page-weblytic.vercel.app, is identified as a high-risk banking phishing site impersonating Easybank. Analysis indicates the threat type involves a fake login page designed to harvest financial credentials, likely targeting customers of the legitimate Easybank brand. The page mimics the appearance of a legitimate banking portal, increasing the likelihood of successful credential theft from unsuspecting victims. Infrastructure analysis reveals the following technical indicators: the domain is flagged by 21 out of 95 security vendors on VirusTotal, with registration through Vercel Inc. It resolves to IP address 64.29.17.3, hosted under Amazon.com, Inc. (AS16509) in the United States. The domain was created on January 28, 2020, and is currently associated with an SSL certificate issued by Google Trust Services (WR1). It appears on two security blocklists, including PhishDestroy and PhishingDB, confirming its malicious classification. The domain remains active as of the latest verification, posing an ongoing risk to users. Response actions should include immediate blocking at the network and endpoint levels, as well as notifying affected financial institutions for brand protection measures. Despite existing detections, the domain continues to operate, underscoring the need for continuous monitoring and proactive mitigation to prevent credential theft and financial fraud.