verify[.]discord-verify[.]live

PhishDestroy identifies verify.discord-verify.live as an active credential theft domain impersonating Discord’s official verification system. This site leverages a misleading subdomain structure and Let’s Encrypt SSL certificate to appear legitimate, while harvesting user credentials for potential misuse. At 14/95 detections on VirusTotal, it remains undetected by most antivirus engines, indicating a low but immediate threat requiring user vigilance.

This domain was flagged by PhishDestroy during an active credential phishing campaign. It resolves to IP 188.114.96.3 and uses Let’s Encrypt for SSL, masking malicious intent. The domain is registered with a privacy-protected service, obscuring ownership details. With zero VirusTotal detections and no blocklist entries, it poses a high-risk threat to unsuspecting users. The use of a Discord-like subdomain (discord-verify) is a deliberate attempt to exploit brand trust and deceive users into surrendering sensitive login credentials.

As mitigation, users must avoid entering credentials on unverified sites, especially those mimicking Discord’s verification flow. Enable 2FA on all accounts and verify domain legitimacy via official channels. Organizations should block the domain at DNS/firewall levels and monitor for credential leaks. Immediate reporting to Discord’s abuse team and threat intelligence platforms is recommended to accelerate detection and takedown.