discord[.]zolqid[.]com[.]tr

Analysis indicates that www.discord.zolqid.com.tr is an active credential phishing infrastructure targeting Discord users. The domain was registered on March 29, 2026 and resolves to IP address 45.155.19.10, which geolocates to Turkey. HTTP requests are answered with a 301 redirect, and the TLS certificate is issued by Let’s Encrypt (R12), confirming a valid HTTPS endpoint. The page title returned by the server is "zolqid's venue," which does not reference the impersonated brand and provides no further context on the hosted content.

The site is classified as a credential phishing operation and is listed on a single security blocklist, PhishDestroy, reinforcing its malicious intent. Gridinsoft assigns a trust score of 0 out of 100, indicating an extremely low reputation. VirusTotal reports that the domain has been scanned by 94 vendors, none of which have raised a detection at the time of analysis; however, the absence of detections does not constitute evidence of safety.

The combination of a recent registration date, low trust score, blocklist inclusion, and explicit impersonation of Discord suggests a purposeful attempt to harvest user credentials. Defenders should proactively block DNS resolution for www.discord.zolqid.com.tr, add the associated IP 45.155.19.10 to network‑level deny lists, and monitor for any traffic patterns consistent with credential submission to Discord‑related endpoints. Continued observation is advised, as the threat remains under investigation and may evolve with additional infrastructure or payload delivery mechanisms.