discord-d7f1pmwte-owenlikecoding[.]vercel[.]app

This domain, discord-d7f1pmwte-owenlikecoding.vercel.app, poses a high-risk brand impersonation threat by mimicking Discord, a widely used communication platform. The site is designed to deceive users into entering credentials or downloading malicious content under the false pretense of being an official Discord service. The page title explicitly displays 'Discord,' and the visual design likely mirrors legitimate Discord properties, increasing the likelihood of successful social engineering attacks. Such impersonation domains are commonly used in credential harvesting campaigns, malware distribution, or account takeover schemes. Analysis indicates the domain is actively malicious, with 22 out of 95 security vendors on VirusTotal flagging it as harmful. The domain is registered through Vercel Inc. and resolves to the IP address 64.29.17.67, hosted on infrastructure belonging to Amazon.com, Inc. (AS16509) in the United States. The SSL certificate is issued by Google Trust Services under the 'WR1' root, which, while legitimate, does not mitigate the domain's malicious intent. The domain appears on two security blocklists and is explicitly labeled as phishing by Google Safe Browsing. Infrastructure analysis reveals the domain is part of a broader pattern of Vercel-hosted phishing pages, which are often short-lived but highly effective due to the platform's perceived legitimacy. Users who have visited discord-d7f1pmwte-owenlikecoding.vercel.app should assume their credentials or other sensitive information may have been compromised. Immediate actions include resetting passwords for Discord and any accounts where the same credentials were reused, enabling multi-factor authentication where available, and scanning the device for malware using updated security tools. If financial or personal data was entered, monitor accounts for unauthorized activity and consider reporting the incident to relevant fraud prevention authorities. Avoid interacting with the domain or any links associated with it, as it remains active and continues to pose a threat.