Validate My Login

Redirecting…

An external application wants to access your account

A third-party application is requesting access to your Discord account.

Validate My Login

validatemylogin.com

This will allow Validate My Login to:

Access your username, avatar, and banner
Read your email address
Know what servers you're in

Do not authorize this application if you do not trust it. Authorizing gives it access to your account information.

Sign in to continue to Validate My Login

Make sure you trust Validate My Login. You may be sharing sensitive info with this site or app. You can always review or remove access in your Google Account. Learn about the risks.

Log in with Facebook

Validate My Login would like to:

Access your information to verify your identity for the survey.

Access your profile name, profile picture, and email
See your friend list
Access your email address

Edit access

🛡️

Good instincts!
You didn't fall for it.

Something felt off, and you listened to that feeling. That's exactly the right response. This was a phishing demonstration — but here's what you might have noticed:

Did you check the URL? The address bar didn't show google.com, discord.com, or facebook.com — it showed a random site you've never heard of.
Why was a survey asking for social login? A legitimate survey rarely needs access to your Discord servers, friend list, or personal Google data.
Did the permissions seem excessive? Requesting your email, friend list, and server info just to take a survey is a red flag.
Did you recognise the app? "Validate My Login" isn't a real service — but it sounded just official enough to seem plausible.

No data was collected. This page runs entirely in your browser.

🎣

You just got phished!

Don't worry — this was a safe demonstration. Nothing you entered was saved or sent anywhere. But in a real attack, your account would now be compromised.

QR codes hide URLs. You can't see where you're going before you get there. Always check the address bar after scanning.
Context makes you trust. You were told this was for a survey, so authenticating felt reasonable. Attackers use exactly this technique.
"Validate My Login" isn't real. But in the moment, the polished design made it feel legitimate. Real phishing pages look just as professional.
OAuth prompts can be faked too. That Discord, Google, or Facebook consent screen? Completely fake HTML. Always check the URL bar shows the real domain.
Never authenticate through a page you reached via an unverified link. Go directly to the site yourself.

No data was collected. This page runs entirely in your browser.

Validate My Login

An external application wants to access your account

Sign in to continue to Validate My Login

Validate My Login would like to:

Good instincts!You didn't fall for it.

You just got phished!

Good instincts!
You didn't fall for it.