losmatres0402404[.]vercel[.]app

This domain is actively harvesting login credentials under the guise of a discreet encounters platform, using the title 'Encuentroooss D1screetooss'. The site targets users seeking private interactions, tricking them into submitting sensitive account details through a fabricated login interface. The threat primarily focuses on credential theft, which could lead to unauthorized access to personal accounts, identity theft, or further targeted attacks using stolen information. Analysis indicates the domain was created on April 14, 2026, and is hosted through Vercel Inc., resolving to the IP address 64.29.17.131. It is flagged by 20 out of 95 security vendors on VirusTotal, with Google Safe Browsing confirming its phishing classification. The domain appears on one security blocklist and is actively blocked by at least one threat intelligence feed. The SSL certificate, issued by Google Trust Services (WR1), does not mitigate the malicious intent, as phishing sites frequently use valid certificates to appear legitimate. If a user has visited this domain or entered any credentials, immediate action is required. First, reset passwords for any accounts accessed or submitted on the site, prioritizing email and financial services. Enable multi-factor authentication where available to add an additional security layer. Monitor accounts for unauthorized activity, such as logins from unfamiliar locations or devices, and review connected applications for suspicious permissions. If financial information was shared, contact relevant institutions to report potential fraud. Users should also scan their devices for malware, as some phishing sites deploy additional payloads. Finally, report the domain to local cybersecurity authorities or incident response teams to aid in takedown efforts.