auth-verify-5475[.]vercel[.]app

The domain auth-verify-5475.vercel.app was identified as a credential phishing site designed to steal login credentials from unsuspecting users. It did not impersonate a specific brand or employ a drainer kit. As of the latest verification, auth-verify-5475.vercel.app has been taken offline, though it previously posed an elevated risk for credential theft.

Technical analysis of auth-verify-5475.vercel.app revealed limited detection, with only 1 of 95 VirusTotal security vendors flagging the domain. The domain was registered through Tucows Domains Inc. on February 21, 2026, and resolved to the IP address 64.29.17.195, hosted on Amazon.com, Inc.'s infrastructure (AS16509) in the US. It appeared on a single security blocklist (PhishDestroy) and used an SSL certificate issued by Google Trust Services / WR1. The observed page title was '404: NOT_FOUND', with an HTTP status of 404, and the site employed technologies such as Vercel and HSTS.

Users who may have interacted with auth-verify-5475.vercel.app should immediately change passwords for any accounts accessed during the exposure period, particularly if credentials were entered. Enabling two-factor authentication (2FA) on all critical accounts is strongly recommended to mitigate further risk. Victims should monitor accounts for unauthorized activity and report the phishing domain to platforms like Google Safe Browsing, PhishTank, or their organization's security team for further action.