discordseasons[.]pro

PhishDestroy identifies active credential-theft phishing targeting Discord users through discordseasons.pro, a domain hosting counterfeit seasonal promotion pages designed to harvest account credentials. This domain poses an elevated risk as a generic phishing lure. It was registered on April 25, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED, resolving to IP 5.253.61.77. VirusTotal confirms only 1 out of 95 security engines currently detect the threat, indicating low detection coverage. Discord users who interact with this domain risk exposing their login credentials to attackers, who may then hijack accounts for fraud, spam propagation, or data theft. Technical indicators include the Let’s Encrypt SSL certificate, which provides a false sense of legitimacy, and the recent domain registration date, suggesting opportunistic deployment. The low blocklist count (1/95) highlights the campaign’s stealth and the need for proactive defense. Users who have visited discordseasons.pro should immediately change their Discord password, enable two-factor authentication, and scan their systems for unauthorized access. Avoid interacting with any links or forms on this domain and report suspicious activity to Discord’s Trust & Safety team.