discord-securate[.]com

PhishDestroy has identified discord-securate.com as an active credential theft phishing domain posing an elevated risk to users. This domain mimics Discord’s branding to harvest login credentials and session tokens, enabling unauthorized access to user accounts and associated data. PhishDestroy’s analysis confirms this domain was registered on May 01, 2026, through Global Domain Group LLC and resolves to IP address 104.21.42.214. The domain is protected by a Let’s Encrypt SSL certificate, which enhances its appearance of legitimacy. However, 8 out of 95 VirusTotal security vendors have flagged this domain, and it has been listed on two reputable blocklists, including OISD and Hagezi, indicating widespread suspicion of malicious intent. These signals collectively suggest a coordinated effort to deceive users into surrendering sensitive authentication credentials. To mitigate the threat posed by discord-securate.com, users should immediately block the domain and avoid accessing it via any link or search result. Organizations are advised to update firewall and DNS blocklists with the domain and associated IP (104.21.42.214) to prevent inbound or outbound traffic. If credentials were entered, users must change passwords immediately, enable multi-factor authentication, and review account activity for unauthorized access. Security teams should investigate endpoints for signs of compromise and consider user awareness training to reduce susceptibility to similar campaigns.