brevispresale[.]xyz

The domain brevispresale.xyz was used for brand impersonation targeting Discord users in a phishing scam. This site mimicked Discord branding and operated as a social media scam before being taken offline. As of now, brevispresale.xyz is not accessible, but it previously posed an elevated risk to users seeking information about Discord or related services and should be considered unsafe.

Technical analysis of brevispresale.xyz shows that it was registered through Ultahost, Inc. on October 19, 2025, and resolved to the IP address 45.12.2.67 (UA, AS6698 Virtual Systems LLC). The domain was flagged by 2 of 95 security vendors on VirusTotal (including alphaMountain.ai and Forcepoint ThreatSeeker) and appears on one security blocklist (PhishDestroy), but is not flagged by Google Safe Browsing. It utilized an SSL certificate issued by Let's Encrypt / R13. Trust scores are extremely low: 0/100 from Gridinsoft and 1/100 from Scamadviser. Technologies detected include Plesk, Tailwind CSS, and Nginx. The domain's MX record points to mail.brevispresale.xyz, and nameservers are ns1.brevispresale.xyz and ns2.brevispresale.xyz.

Anyone who interacted with brevispresale.xyz under the impression it was a legitimate Discord resource should immediately change their Discord password, enable two-factor authentication, and monitor for suspicious account activity or fraud attempts. No crypto drainer kit was identified, but users should remain vigilant. Phishing incidents like this can be reported to Discord and relevant security organizations to help reduce risk for others.