easy-bank-zeta[.]vercel[.]app

This domain is flagged as a high-risk credential harvesting phishing site targeting financial institution customers. Analysis indicates the infrastructure is designed to mimic legitimate banking portals, capturing sensitive login credentials and personal data under false pretenses. The page title, 'Frontend Mentor | Easybank landing page,' suggests an attempt to impersonate a known financial brand while leveraging a development platform for hosting. Infrastructure analysis reveals the domain was registered on February 21, 2026, through Tucows Domains Inc., an uncommon registrar for banking services. It resolves to IP address 64.29.17.195, hosted on Amazon.com, Inc. (AS16509) infrastructure in the United States. The SSL certificate is issued by Google Trust Services (WR1), providing a false sense of security. Detection metrics show 20 out of 95 security vendors on VirusTotal have flagged the domain as malicious. The domain appears on one security blocklist and is actively blocked by enterprise threat intelligence feeds, confirming its fraudulent nature. Mitigation requires immediate action from network administrators and end users. Organizations should block the domain and its resolving IP at the perimeter firewall and DNS level. End users should avoid interacting with any login prompts or data submission forms presented by this domain. Financial institutions are advised to monitor for credential reuse stemming from this campaign and implement multi-factor authentication to mitigate account takeovers. Security teams should review logs for connections to 64.29.17.195 and the domain since its creation date to identify potential compromise.