discord-clone-static[.]netlify[.]app

The domain discord-clone-static.netlify.app is currently active and classified as a high-risk brand impersonation threat specifically targeting Discord, a widely used communication platform. Analysis indicates this site mimics Discord's official interface to deceive users into submitting login credentials or other sensitive information, constituting a direct credential harvesting operation. Infrastructure analysis reveals multiple technical indicators supporting this assessment. The domain is flagged by 20 of 95 security vendors on VirusTotal, indicating broad consensus among threat intelligence providers. It is registered through Name.com, Inc under Netlify's hosting infrastructure and resolves to the IP address 35.157.26.135. The domain was created on February 21, 2026, though this future-dated registration itself appears anomalous. It appears on one security blocklist, and its SSL certificate is issued by DigiCert Inc (DigiCert Global G2 TLS RSA SHA256 2020 CA1), which while legitimate, is commonly exploited by malicious actors to lend false credibility. The page title explicitly reads 'Discord Clone,' further confirming its impersonation intent. Current status remains active, and the risk level is assessed as high due to the combination of brand impersonation, credential theft potential, and existing detections. Users are strongly advised to avoid interacting with this domain and to verify all Discord-related communications through official channels only. Network administrators should block the domain and associated IP address 35.157.26.135 at perimeter security controls. Any credentials potentially exposed to this site should be considered compromised and reset immediately. Organizations are encouraged to monitor for connections to this domain as an indicator of compromise.