discord[.]pokemaobr[.]dev

The domain discord.pokemaobr.dev was registered on March 28, 2026 through Squarespace Domains II LLC and resolves to the IP address 198.185.159.144, which is associated with Squarespace, Inc. in the United States. The site returns an HTTP 302 redirect and presents a page title of "Discord," indicating a possible attempt to mimic the legitimate Discord brand. The domain is protected by a Let's Encrypt R13 certificate, and its authoritative nameservers are ns-cloud-a1.googledomains.com, ns-cloud-a2.googledomains.com, and ns-cloud-a3.googledomains.com. Security telemetry shows a Gridinsoft trust score of 0 / 100 and the domain is listed on a single blocklist; it has also been blocked by PhishDestroy. VirusTotal reports that the domain was scanned by 94 vendors, with no detections at the time of analysis, but the absence of detections does not constitute proof of safety. The intelligence classifies the activity as brand impersonation under the generic_phishing category. Current observations are limited to infrastructure data; the actual page content, login forms, or credential‑harvesting mechanisms have not been captured. Defenders should consider adding discord.pokemaobr.dev to outbound and inbound filtering rules, monitor DNS queries for this domain, and continue periodic scanning for malicious payloads. Ongoing observation is recommended until the investigation yields definitive evidence of malicious payload delivery or victim impact.