asrg-tokenchecker[.]pages[.]dev

This domain, asrg-tokenchecker.pages.dev, is currently under investigation for hosting a Discord token stealer phishing operation. Infrastructure analysis reveals the domain was registered on March 25, 2026, through Cloudflare and remains active as of July 12, 2026. The page title explicitly states 'Discord Token Checker,' indicating a direct threat to Discord user credentials and session tokens. The domain resolves to IP 188.114.96.3, geolocated to Canada under Cloudflare's network, and employs Cloudflare nameservers (asa.ns.cloudflare.com, jerry.ns.cloudflare.com) alongside HSTS and HTTP/3 technologies. The SSL certificate is issued by Google Trust Services (WE1), a legitimate provider, which does not mitigate the domain's malicious intent. While no detections were recorded by 94 security vendors in the most recent scan, this absence of flags does not confirm safety. The domain appears on one security blocklist and is actively blocked by PhishDestroy, reinforcing its classification as brand impersonation targeting Discord. Defenders should treat this domain as a confirmed phishing threat, prioritizing blocking at the DNS or network level and monitoring for related credential theft attempts. Further analysis of the site's payload is recommended to identify additional indicators of compromise.