discofd[.]com

The domain discofd.com was created on 21 February 2026 and is currently listed as offline. DNS resolution points the domain to IP address 216.58.206.78, which belongs to Google LLC (AS15169) and is geolocated in Germany. The use of a legitimate Google address is a common tactic in brand‑impersonation campaigns, allowing the malicious site to appear trustworthy to browsers and security tools. The only observed HTTP response before takedown returned the title “Bevor Sie fortfahren”, a German phrase meaning “Before you continue”, indicating that the site targeted German‑speaking users. Security reputation services assign the domain a Gridinsoft trust score of 0 / 100 and a Scamadviser score of 35 / 100, both indicating extreme risk.

The domain appears on two independent blocklists – PhishDestroy and DiscordPhishing – and has been referenced in four AlienVault OTX threat‑intel pulses. VirusTotal scans show that 15 of 95 antivirus and URL‑reputation engines flagged the domain as malicious, reinforcing the suspicion of a tech‑support scam. According to the intelligence feed, the campaign is classified as a tech‑support scam that pretends to represent Google, a classic brand‑impersonation vector used to trick victims into granting remote access or divulging credentials. Defenders should immediately block discofd.com at DNS or proxy level, ensure that endpoint URL filtering policies include the domain, and monitor for any residual traffic to 216.58.206.78 that originates from internal hosts.

Because the domain leverages a Google‑owned IP, additional heuristics such as anomalous TLS fingerprints or unexpected sub‑domain patterns may be required to differentiate legitimate Google services from malicious use. Continuous review of the two blocklists and OTX pulses is recommended to capture any re‑registration attempts or related infrastructure.