discordseason[.]pro

PhishDestroy identifies discordseason.pro as an active phishing site impersonating Discord’s identity verification page. The domain presents a fraudulent login interface designed to harvest user credentials while deploying a cryptocurrency drainer payload upon connection. Prompt action is critical as the page title ‘GO VERIFY YOURSELF’ mirrors legitimate Discord messaging, creating a high-fidelity deception for unsuspecting users seeking account recovery or 2FA setup. This domain was flagged with an elevated risk level and is currently unresolved by 94 out of 95 VirusTotal security vendors despite clear malicious intent. It resolves to IP 5.253.61.77 via Let’s Encrypt SSL issued on April 20, 2026, and is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED—an anonymization-friendly registrar with a history of enabling malicious domains. The combination of a recent creation date, low detection coverage, and IP reputation raises the likelihood of ongoing exploitation targeting Discord users and communities. To mitigate exposure, users should avoid accessing discordseason.pro and inspect any links claiming to originate from Discord for mismatches in domain spelling or HTTPS validity. If credentials were entered, rotate passwords immediately and revoke unauthorized device access in account settings. Report the domain to PhishDestroy and monitor wallet activity for signs of crypto drainer activity. Block the IP 5.253.61.77 at the network level where possible to prevent further access by the threat actor behind this campaign.