discordauth[.]vip
“Telegram: Join Group Chat”
discordauth.vip — सामग्री अनुपलब्ध (HTTP 502). घोटाले का प्रकार: Generic Phishing. साक्ष्य सारांश: VirusTotal 3/91 (ADMINUSLabs, Gridinsoft, Kaspersky); URLQuery 2 alerts; PhishDestroy score 70/100. रजिस्ट्रार: Dynadot.
मूल फॉरेंसिक रिकॉर्ड सुरक्षित रखने के लिए नीचे का विस्तृत PhishDestroy AI विश्लेषण अंग्रेज़ी में रखा गया है।
PhishDestroy identifies discordauth.vip as an active Discord credential phishing site designed to steal user login details and hijack accounts. This fraudulent domain mimics official Discord authentication pages to trick visitors into entering their credentials, which are then harvested by attackers for account takeovers and potential crypto-draining operations. The site leverages social engineering by using a domain name (discordauth.vip) that closely resembles legitimate Discord services, capitalizing on users' trust in familiar branding to lower their guard during login attempts.
This domain was flagged by multiple security vendors and blocklists due to its malicious intent. Discordauth.vip was created on April 26, 2026, and is registered through Dynadot Inc. It appears on two prominent security blocklists (OISD and Hagezi) and is flagged by 3 out of 95 security vendors on VirusTotal, indicating a high likelihood of malicious activity despite its recent creation. The domain resolves to IP address 104.21.33.98 and uses a Let's Encrypt SSL certificate, which may give it a false sense of legitimacy. These technical indicators, combined with the lack of a credible reputation, strongly suggest this domain is part of a coordinated phishing campaign targeting Discord users.
If you visited discordauth.vip, immediately change your Discord password and enable two-factor authentication (2FA) if you haven’t already. Do not reuse the same password on other platforms. Scan your device for malware using reputable antivirus software, as phishing sites often deploy additional payloads. Consider revoking any active sessions or connected applications from your Discord account settings. If you entered your credentials, revoke access for unknown devices and review your recent account activity for suspicious behavior. For further verification, cross-check the domain against PhishDestroy’s latest threat intelligence to confirm its status. Stay vigilant and avoid clicking on unsolicited links or pop-ups claiming to offer Discord authentication services.
नेटवर्क सुरक्षा इंटेलिजेंस
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Hagezi Threat Feed | discordauth.vip |
malicious | Sinkholed |
| DNS4EU | discordauth.vip |
malicious | Sinkholed |
धमकी प्रतिक्रिया पाइपलाइन
सार्वजनिक ब्लॉकलिस्ट स्थिति
सहेजा गया कैप्चर
डोमेन इंटेलिजेंस
तकनीकी विवरणडीएनएस, एसएसएल एसएएन, टाइमस्टैम्प
ICANN OVERSIGHT
प्रत्यायन और आरएए संदर्भ
प्रत्यायन और आरएए संदर्भ
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
तकनीकें · 3 identified
Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.
getbootstrap.com 100% विश्वासNginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.
nginx.org 100% विश्वासHTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org 100% विश्वासवायरसटोटल विश्लेषण
साक्ष्य और बाहरी रिपोर्टें
क्या आप इस साइट से प्रभावित हुए?
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
अपने स्थानीय अधिकारियों को रिपोर्ट करें
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।
किसी भी डोमेन की जाँच करें
संग्रहीत ब्लॉकलिस्ट, WHOIS, DNS और सार्वजनिक स्कैन साक्ष्य का उपयोग करके खतरे का विश्लेषण
अभी स्कैन करेंफ़िशिंग की रिपोर्ट करें
संदिग्ध डोमेन हमारे थ्रेट डेटाबेस में जमा करें — समुदाय की सुरक्षा करें
रिपोर्ट करेंसीधा खतरा फीड
हाल की फ़िशिंग रिपोर्टें और उपलब्धता में परिवर्तन देखे गए
निगरानी करेंजानकारी में रहें, सुरक्षित रहें
लाइव खतरों की निगरानी करें या यदि आपको लगता है कि यह एक गलत सकारात्मक है तो इस लिस्टिंग को चुनौती दें।