discord-clone-using-html-and-tailwind-css[.]vercel[.]app

The domain discord-clone-using-html-and-tailwind-css.vercel.app is identified as an active credential phishing site specifically targeting users of the Discord communication platform. Analysis confirms the page replicates Discord's official login interface under the title 'Discord | Your Place to Talk and Hang out,' designed to harvest user credentials through fraudulent authentication prompts. The domain remains operational as of this report, posing a high-risk threat to unsuspecting users. Infrastructure analysis reveals the domain is hosted on IP address 64.29.17.131, registered through Vercel Inc., and secured with an SSL certificate issued by Google Trust Services (WR1). Security vendor detection rates indicate 18 of 95 engines on VirusTotal flag the domain as malicious, while Google Safe Browsing explicitly classifies it as phishing. The domain appears on two distinct security blocklists, including PhishDestroy and PhishingDB, further corroborating its malicious classification. No legitimate registration or creation date is publicly available, suggesting recent deployment for malicious purposes. Current status confirms the phishing page remains active, with no takedown or mitigation measures observed. Users are strongly advised to avoid interaction with this domain and any associated links. Organizations should implement network-level blocking of the IP address 64.29.17.131 and domain-based filtering for discord-clone-using-html-and-tailwind-css.vercel.app. Security teams are recommended to monitor for credential exposure patterns linked to this campaign and initiate password reset protocols for potentially compromised accounts. Enhanced user education on recognizing cloned authentication interfaces is critical to mitigating this threat.