discordauth[.]vip

PhishDestroy identifies discordauth.vip as an active Discord credential phishing site designed to steal user login details and hijack accounts. This fraudulent domain mimics official Discord authentication pages to trick visitors into entering their credentials, which are then harvested by attackers for account takeovers and potential crypto-draining operations. The site leverages social engineering by using a domain name (discordauth.vip) that closely resembles legitimate Discord services, capitalizing on users' trust in familiar branding to lower their guard during login attempts.

This domain was flagged by multiple security vendors and blocklists due to its malicious intent. Discordauth.vip was created on April 26, 2026, and is registered through Dynadot Inc. It appears on two prominent security blocklists (OISD and Hagezi) and is flagged by 3 out of 95 security vendors on VirusTotal, indicating a high likelihood of malicious activity despite its recent creation. The domain resolves to IP address 104.21.33.98 and uses a Let's Encrypt SSL certificate, which may give it a false sense of legitimacy. These technical indicators, combined with the lack of a credible reputation, strongly suggest this domain is part of a coordinated phishing campaign targeting Discord users.

If you visited discordauth.vip, immediately change your Discord password and enable two-factor authentication (2FA) if you haven’t already. Do not reuse the same password on other platforms. Scan your device for malware using reputable antivirus software, as phishing sites often deploy additional payloads. Consider revoking any active sessions or connected applications from your Discord account settings. If you entered your credentials, revoke access for unknown devices and review your recent account activity for suspicious behavior. For further verification, cross-check the domain against PhishDestroy’s latest threat intelligence to confirm its status. Stay vigilant and avoid clicking on unsolicited links or pop-ups claiming to offer Discord authentication services.