true-north[.]xyz

The domain true-north.xyz is associated with brand impersonation, specifically targeting Discord users. It has been identified as a phishing scam, with its current status being taken offline. The site was designed to impersonate Discord, potentially deceiving users into believing it was a legitimate platform. Given these findings, true-north.xyz is not safe and should be avoided.

Technical analysis reveals that true-north.xyz was detected by 2 of 95 vendors on VirusTotal, including Forcepoint ThreatSeeker and SOCRadar. It is registered through Go Daddy, LLC, with a creation date of January 09, 2025, and resolves to the IP address 31.43.160.6. The domain is listed on one security blocklist, PhishDestroy, and uses an SSL certificate issued by Let's Encrypt / E7. The technologies identified on the site include Framer Sites, React, HSTS, and HTTP/3.

For those who may have interacted with true-north.xyz, it is crucial to take immediate safety measures. Users should change any compromised passwords and enable two-factor authentication on their accounts to prevent unauthorized access. It's also important to monitor for any suspicious activity or fraud. Reporting phishing attempts to relevant authorities and platforms can help mitigate further risks. Always verify the authenticity of websites, especially those impersonating known brands like Discord, to protect personal and financial information.