easybank-landing-page-rho[.]vercel[.]app

This domain is flagged as a high-risk banking phishing threat. Analysis indicates it is actively targeting users by impersonating a legitimate financial institution landing page, specifically labeled 'Easybank landing page.' The domain remains operational and poses a significant risk of credential theft or financial fraud. Infrastructure analysis reveals the domain resolves to IP 64.29.17.195, hosted under AS16509 (Amazon.com, Inc.) in the United States. It is registered through Vercel Inc. and secured with an SSL certificate issued by Google Trust Services (WR1). Security vendors on VirusTotal detect this domain at 25/95, while it appears on two distinct security blocklists, including PhishDestroy and PhishingDB. No legitimate creation date or historical context is provided, reinforcing its malicious classification. Mitigation steps for this banking phishing threat include immediate blocking of the domain and associated IP at the network perimeter. Organizations should deploy indicators of compromise (IOCs) such as the domain, IP, and SSL certificate fingerprint into security controls. End-users must be alerted to avoid entering credentials or financial details on this site. If exposure is suspected, reset passwords via the legitimate financial institution’s verified portal and monitor accounts for unauthorized transactions. Network logs should be reviewed for connections to 64.29.17.195 or related subdomains.