easybank-landing-page-xi-eight[.]vercel[.]app

Analysis of the domain easybank-landing-page-xi-eight.vercel.app indicates it is an active high-risk banking phishing site targeting EasyBank customers. The domain was registered on March 9, 2026, and remains operational as of July 12, 2026. It resolves to IP address 216.198.79.131, hosted on Amazon.com, Inc. infrastructure (AS16509) in the United States. The SSL certificate is issued by Google Trust Services (WR1), a common pattern observed in phishing campaigns leveraging legitimate certificate authorities to appear trustworthy. The page title explicitly displays 'EasyBank,' aligning with the reported scam type of banking phishing. Security vendors have flagged the domain, with 10 out of 94 engines on VirusTotal detecting malicious activity. It is currently blocked by at least one security blocklist and has received a trust score of 0/100 from Gridinsoft and 1/100 from Scamadviser, further corroborating its malicious classification. The site uses Vercel hosting and Unpkg for content delivery, technologies frequently exploited in phishing operations due to their ease of deployment and low cost. Defenders should treat this domain as a confirmed phishing threat. Network-level blocking of the domain and its resolving IP (216.198.79.131) is recommended. Organizations should also monitor for any internal traffic to this domain, as it may indicate compromised credentials or ongoing phishing attempts. The exact content of the phishing page has not been analyzed, but the combination of technical indicators, brand impersonation, and security vendor detections provides sufficient evidence to classify this as a high-risk threat. No legitimate banking activity is associated with this domain.