phase-auth-6114[.]vercel[.]app

The domain phase-auth-6114.vercel.app was identified as a generic phishing site with no specific brand impersonation or drainer kit detected. At the time of analysis, the site posed a generic phishing threat designed to harvest user credentials or sensitive information. The domain phase-auth-6114.vercel.app is currently taken offline, reducing immediate risk to potential victims.

Technical indicators show phase-auth-6114.vercel.app had 0 of 95 VirusTotal vendors flagging it as malicious, and Google Safe Browsing did not list it as unsafe. The domain was registered through Tucows Domains Inc. on February 21, 2026, and resolved to the IP address 216.198.79.67, hosted on Amazon.com, Inc. infrastructure (AS16509). It appeared on 1 security blocklist (PhishDestroy) and used an SSL certificate issued by Google Trust Services / WR1. The observed page title was '404: This page could not be found,' with an HTTP 404 status, and technologies detected included Vercel and HSTS.

Individuals who may have interacted with phase-auth-6114.vercel.app should change any credentials entered on the site, enable two-factor authentication on affected accounts, and monitor for unauthorized activity. Victims of phishing scams are advised to report the incident to their local cybercrime authority or platforms like the FBI’s IC3 (Internet Crime Complaint Center) or the Anti-Phishing Working Group (APWG). If financial data was exposed, contact the relevant institution immediately to secure accounts.