discordinc[.]netlify[.]app

This domain, discordinc.netlify.app, is actively engaged in brand impersonation phishing targeting Discord users. Analysis indicates the site presents a fraudulent login interface under the title 'Discord,' designed to harvest user credentials. The domain remains operational as of the latest verification, posing an ongoing threat to unsuspecting users. Infrastructure analysis reveals the domain is hosted on Netlify infrastructure, resolving to the IP address 98.84.224.111, which is geolocated in Germany under Amazon.com, Inc.'s AS16509. The domain appears on two security blocklists and is flagged by 20 of 95 security vendors on VirusTotal, indicating broad recognition as malicious. The SSL certificate is issued by DigiCert Inc, specifically a DigiCert Global G2 TLS RSA SHA256 2020 CA1, which does not mitigate the inherent risk of the domain's fraudulent activity. Current status confirms the domain remains active, with no takedown observed. Organizations and users are advised to block the domain at the DNS or proxy level immediately. Security teams should monitor for connections to 98.84.224.111 and review logs for any prior interactions with discordinc.netlify.app. End-users who may have interacted with the site should be instructed to reset credentials via legitimate Discord channels and enable multi-factor authentication. Continuous monitoring of Netlify-hosted subdomains impersonating trusted brands is recommended due to the platform's frequent abuse for phishing campaigns.