authcord[.]org

This domain is flagged as an elevated-risk brand impersonation threat designed to mimic Discord’s authentication portal. Analysis indicates the site employs social engineering tactics to harvest user credentials, potentially enabling account takeovers or further malicious payload delivery. The domain specifically replicates Discord’s branding, including the page title "Discord - Group Chat That’s All Fun & Games," to deceive users into entering sensitive information. Infrastructure analysis reveals the domain was registered on February 21, 2026, through NameCheap, Inc., and resolves to the IP address 172.67.164.169. It is protected by Cloudflare and uses HTTP/3, with an SSL certificate issued by Google Trust Services. Detection metrics show 2 out of 95 security vendors on VirusTotal flagged the domain as malicious, while it appears on four security blocklists, including MetaMask, SEAL, PhishDestroy, and OISD. Additionally, the domain is referenced in one threat intelligence pulse on AlienVault OTX, further corroborating its malicious classification. To mitigate risks associated with this brand impersonation threat, users should avoid interacting with the domain entirely. If credentials were entered, immediate password resets and multi-factor authentication (MFA) activation are recommended for the affected account. Organizations should update blocklists to include this domain and its associated IP address. Endpoint protection and email filtering systems should be configured to detect and quarantine similar impersonation attempts targeting communication platforms. Users are advised to verify domain authenticity by checking official sources before entering login details.