discord[.]colonialdgc[.]com

The domain discord.colonialdgc.com remains active as of the report date, July 26, 2026, and is classified as a generic phishing host. Infrastructure analysis shows the domain is registered through eNom, LLC and resolves to the A2 Hosting name servers ns3.a2hosting.com and ns4.a2hosting.com. The HTTP response is a 301 redirect, indicating the site may be forwarding traffic to a secondary location used for credential harvesting. Threat intelligence indicates the domain has been blocked by the PhishDestroy filtering service and appears on one public blocklist, reinforcing its malicious status.

VirusTotal scans have recorded a single positive detection out of 91 security vendors, providing additional corroboration of malicious activity. The limited detection count suggests the campaign may be employing a low‑profile hosting configuration to evade broader detection. No further public attributes such as page title, SSL certificate details, or geographic hosting information are currently available, leaving the exact landing page content and target brand undisclosed.

Defenders should continue to block the domain at network perimeters, update DNS blocklists, and monitor for any new indicators of compromise that reference this host. Because the domain uses a legitimate registrar and common hosting name servers, automated reputation systems may under‑score it, so manual inclusion in internal blocklists is advised. Continuous observation for additional detections or changes in the redirect behavior is recommended to ensure timely mitigation.