It appears that https://www.discover.com/ and their Android app has been exploited somehow, or they pushed some test version to production.

I tried to log into the website but it sent me into a logout loop, even incognito / cleared cookies etc.

Here's where it got interesting. I tried logging into the Android app and it popped up an error message with a phone number to call. The phone number lead me to a spam line trying to sell me random products like insecticides, asking for my personal information, etc.

Wonder if we'll see this in the news?

EDIT: Their login page now leads to a new page stating technical difficulties. The app no longer shows the error from before. It just says that it's offline.