discord-login-page[.]vercel[.]app

This domain, discord-login-page.vercel.app, operates as a high-risk phishing site designed to harvest user credentials by impersonating the Discord login interface. Visitors encounter a fraudulent page titled 'Discord,' which mimics the legitimate platform's authentication portal. The objective is to deceive users into entering their account details, which are then captured by threat actors for unauthorized access, account takeovers, or further malicious activities such as spam, malware distribution, or financial fraud. Analysis indicates the domain was registered through Vercel Inc. on March 02, 2026, and is currently hosted on IP address 216.198.79.195, located within the Amazon.com, Inc. autonomous system (AS16509). The site remains active despite being flagged by 19 out of 95 security vendors on VirusTotal for phishing-related activity. Additionally, the domain appears on one security blocklist and is explicitly identified as a phishing threat by Google Safe Browsing. The SSL certificate, issued by Google Trust Services (WR1), does not mitigate the risk, as encrypted connections are commonly exploited in phishing campaigns to lend a false sense of legitimacy. Users who have visited discord-login-page.vercel.app or entered credentials on the site should immediately take corrective action. First, change the password for the affected Discord account and enable multi-factor authentication if not already active. Review the account for unauthorized activity, including unusual messages, server memberships, or linked applications. Monitor associated email accounts for suspicious login attempts or password reset requests. If financial or personally identifiable information was entered, consider reporting the incident to relevant authorities and credit monitoring services. Avoid interacting with any communications received from the site, as these may be follow-up phishing attempts.