Free Discord Nitro Phishing

Hey all just sharing a phishing attempt I found in hopes that discord might be able to do something about it. Thank you! We had a friend of ours send many people a message saying they could get free discord nitro by following this link (DO NOT VISIT THIS SITE IT IS A PHISHING ATTEMPT) https://discorcl.click/gift092144

SO interesting about this one
It presents itself as a legitimate discord site using much of the assets of the original aside from the big clock in the center:

Clicking on the link asks you to log into steam. Notably, the URL does not change as it normally would when signing into steam to integrate with another website:

Another note about the above, all of the links lead back to a legitimate steam domain, even linking to exactly what you'd expect, i.e...the store, community, about, even the Join Steam button takes you to a new steam account setup page on Steam's actual website.

Signing in (I used a fake account I just made) sends off a legit-looking steam authentication email except its in a different language: 

It's spoofed for sure looking at the subject. But its spoofing the actual email noreply@steampowered.com

anyways, typing that verification code into the fake webpage landed me here:

just spinning.

But that account i just set up got a legitimate email from steam detailing that I had just changed my email address (I hadnt) and I now nolonger have access to the steam account.

In short. These phishing attempts are scary.

i think the link was the biggest giveaway here. Its plainly not a discord link.

Now if they were able to obscure it in some way that would be impressive. I think they would get a lot more successful attacks if that were the case. Thankfully markdown links are not a thing on discord. The URL they are using is very close to looking like a discord link. 

Thanks for reading!