Social media

Discord lookalike domains

Greyphish has recorded 234 domains that resemble Discord since February 2026, 40 of them in the last 90 days. They split between combosquats (51%) and typosquats (44%). .com carries 65% of them, out of 46 endings in all. The pace has picked up, with 21 in the last 30 days against 7 in the 30 before. The busiest week began 11 May 2026, with 14 new ones. 38 certificates for unregistered .ph, .com.ph, .net.ph names (registry wildcard) are excluded: the registry answers for any name under those endings, so nobody had to register one to get a certificate for it.

Data as of . Public sources only.

Lookalikes seen
234
since February 2026
Last 90 days
40
21 in the last 30 days
Endings
46
most on .com (65%)
Serve a website
44%
of 43 checked; 28% publish MX

What kind of lookalikes

Combosquats119 (51%)

The brand spelled correctly with a word added, such as login or support. More

Typosquats103 (44%)

One or two keystrokes away from the real name: a letter dropped, doubled, swapped or mistyped. More

Homoglyphs12 (5%)

A letter swapped for one that looks the same, in ASCII or in Unicode written as punycode. More

Words most often added to the name in the last 90 days: web (8), app (6), support (3).

Lookalikes per week

TypoComboHomoglyph
7
14
Apr 20
Jun 15
Aug 10
New lookalikes per week (UTC), by type, over the last 26 weeks. The last bar is this week so far.
Show as a table
Week ofTypoComboHomoglyphTotal
2026-04-2047213
2026-04-271001
2026-05-040112
2026-05-1176114
2026-05-181001
2026-05-250112
2026-06-012002
2026-06-081214
2026-06-151102
2026-06-221203
2026-06-290000
2026-07-060101
2026-07-133104
2026-07-200213
2026-07-270101
2026-08-030202
2026-08-101506
2026-08-170101
2026-08-240000
2026-08-312103
2026-09-070101
2026-09-141012
2026-09-211001
2026-09-281304
2026-10-05111012
2026-10-120202

Endings

The 8 most used of the 46 top-level domains these lookalikes sit under.

EndingLookalikesShare
.com15164.5%
.xyz93.9%
.net83.4%
.ru52.1%
.org41.7%
.co31.3%
.de31.3%
.help31.3%

Where they are registered

For the 153 with a registrar in WHOIS (65% of all). Brand-protection registrars mostly hold defensive registrations made by brands themselves, so a domain there is more likely the brand's own than an imitation.

RegistrarLookalikesShareType
Media Elite Holdings2617.0%Retail
GoDaddy2013.1%Retail
Dynadot149.2%Retail
Cloudflare138.5%Retail
Namecheap117.2%Retail
NameBright106.5%Retail
Porkbun74.6%Retail
Above.com53.3%Retail

What the live ones do

43 of these lookalikes were registered and checked for a website and mail: 19 (44%) served a website and 12 (28%) publish MX records, so they can receive email. Checks run on the higher-severity matches that resolve, not on every lookalike.

Google Web Risk lists none of the 8 live ones checked against it.

13 were tracked while live and 0 have since gone down. See what to do about a lookalike.

Recent examples

The 10 most recent, written with [.] so they cannot be clicked. The brand's own domains and registrations held by brand-protection registrars are left out. A lookalike resembles Discord; it is not necessarily malicious, and none of these is a claim about who registered it or why.

  • discordweb[.]xyz
    Combo, Oct 14No site or mail when checked
  • discordappreviews[.]com
    Combo, Oct 14Serves a website
  • discord-app[.]site
    Combo, Oct 11No site or mail when checked
  • login-discord-status[.]com
    Combo, Oct 10Not checked
  • discordapp[.]ai
    Combo, Oct 9No site or mail when checked
  • getdiscord[.]com
    Combo, Oct 8No site or mail when checked
  • discordwebcomic[.]com
    Combo, Oct 8No site or mail when checked
  • discord-claim[.]best
    Combo, Oct 8Serves a website
  • discordwebguildguard[.]com
    Combo, Oct 8No site or mail when checked
  • discordapplist[.]com
    Combo, Oct 7Not checked

Or watch it free: Greyphish tells you when a new lookalike of your domain is registered or goes live.

All brands with a page

Greyphish is not affiliated with Discord. Domains listed resemble Discord by spelling; registration alone says nothing about intent. Counts cover domains first seen in public Certificate Transparency logs and ICANN zone files; domains that Greyphish customers watch are excluded.