midnight-website-next-590opo9op-iog[.]vercel[.]app

This domain is a high-risk phishing site impersonating Discord, designed to steal user credentials. The site mimics Discord’s login interface, tricking visitors into entering their account details, which are then captured by threat actors. Such attacks can lead to unauthorized account access, data theft, or further malicious activity targeting connected services. Analysis indicates the domain is flagged by 11 out of 95 security vendors on VirusTotal, confirming its malicious nature. It is registered through Vercel Inc. and resolves to the IP address 64.29.17.195, hosted on Amazon’s infrastructure (AS16509). The SSL certificate, issued by Google Trust Services, does not mitigate the threat, as phishing sites commonly use valid certificates to appear legitimate. The domain remains active and is blocked by at least one security blocklist. If you visited midnight-website-next-590opo9op-iog.vercel.app, immediately change your Discord password and enable multi-factor authentication. Review your account for unauthorized activity, such as unfamiliar logins or messages sent from your profile. Clear your browser cache and cookies to remove any stored session data. Monitor connected accounts, including linked email addresses or third-party services, for signs of compromise. Report the domain to Discord’s official support channels to assist in takedown efforts.