discord-api.domiyoung.com
Category: Phishing
- Don't sign in or pay here. Close it. If you typed a password, change it where you normally use it.
- Already visited? Check your device. A free scan shows whether anything was installed.
- Stop the next one. Combo Cleaner's web protection blocks phishing and scam sites before they load.
Combo Cleaner is PCrisk's own anti-malware tool, owned by RCS LT. Free to scan; removing what it finds needs a licence (7-day free trial).
Description of discord-api.domiyoung.com
This subdomain appears to be hosted under domiyoung.com and uses a name that references Discord's API, which may suggest an attempt to resemble a developer, authentication, or service endpoint related to Discord. However, the publicly accessible page does not reveal the site's actual content or operator details because visitors are shown an interstitial warning instead of the underlying website.
At the time of this scan, Cloudflare displays a phishing warning page for this domain stating that it has been reported for potential phishing. Because that warning page replaces the site itself, the website's real purpose, content, and ownership could not be independently verified from the live page during this scan.
Safety Assessment for discord-api.domiyoung.com
Several risk indicators were present at the time of this scan. The domain was flagged by 2 security engines, and a threat database listing was also present. In addition, Cloudflare displays a phishing warning in front of the site, indicating that the domain has been reported for potential phishing. The domain name also closely resembles a Discord-related service endpoint, which may indicate a look-alike setup intended to appear associated with a well-known platform.
Although the malware scan did not identify malicious files on the fetched page and several major threat databases were clean at the time of this scan, the visible phishing warning and the domain naming pattern are meaningful concerns. The domain's IP address was also listed on one mail-reputation blocklist, which is a weaker signal on its own but still worth noting.
Visitors should not click "Ignore and proceed" on the warning page, and should not enter passwords, payment card details, or personal information on this site. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The domain uses a valid SSL/TLS certificate issued by Google Trust Services and is routed through Cloudflare infrastructure, with the observed server IP resolving to Cloudflare. Nameservers also point to Cloudflare, suggesting the site is using that provider for DNS and reverse-proxy services. The certificate was valid at the time of this scan, though the exact negotiated protocol was not available in the scan data.
DNSSEC appears to be unsigned, which means DNS responses may not benefit from DNSSEC validation. The live response observed during the scan was a Cloudflare phishing warning page with an HTTP 403-style access block, so the origin site's underlying application behavior could not be directly assessed.
Share your experience with this website. Was it safe? Did you encounter any issues?