easybank-landing-page-otabek-coder[.]vercel[.]app

PhishDestroy identifies the domain easybank-landing-page-otabek-coder.vercel.app as a live banking-phishing threat that impersonates EasyBank to harvest credentials and crypto funds. The page is a fraudulent landing page hosted on Vercel’s platform, designed to mimic legitimate EasyBank interfaces and lure users into entering sensitive information. Based on seed 38af65, this threat appears to leverage a social engineering kit targeting crypto assets under the guise of seamless banking integration.

This domain resolves to IP 64.29.17.131 and is registered through Vercel Inc. via platform-level hosting. VirusTotal currently shows 21 out of 95 detections, indicating it has evaded traditional detection mechanisms. The domain is secured with a Google Trust Services SSL certificate and is flagged on 2 security blocklists including OpenPhish and OISD. These indicators suggest a recently deployed, stealthy campaign with low AV detection and moderate infrastructure exposure.

As of current analysis, the threat is active and under investigation by PhishDestroy. Users are advised to avoid interacting with this domain and verify any banking-related URLs using PhishDestroy. While this domain remains unflagged by major AV vendors, its presence on multiple blocklists and platform-level hosting raises concerns about scalability and persistence. Remaining risk is classified as moderate pending further forensic dissection and takedown coordination.