discord.com - URL scan, 21 Aug 2026
MalwareAnalyzer by Cyble scanned discord.com and returned a benign verdict (score 0). The page resolved to 162.159.136.232 on Cloudflare, Inc. in US. The domain was registered 9418 days ago through Cloudflare, Inc.. 1 domain and 2 IPs were contacted, over 72 HTTP requests. 17 malware samples communicate with this URL (Note, Emotet, Bulz, Msilzilla). The request followed 1 redirect before landing. This is a point-in-time observation from 21 Aug 2026; the page may have changed since.
Scan result
- Verdict: benign (score 0) · Confidence 15%
- Scanned URL:
https://discord.gg/aurorafu - Domain: discord.com · IP: 162.159.136.232 · AS13335 · US
- Server: cloudflare
- Page title: Discord
- HTTP status: 200 · text/html
- Registrar: Cloudflare, Inc. · domain age 9418 days · created 2000-11-06
- TLS issuer: C=US, O=Google Trust Services, CN=WE1 · valid to Sep 28 21: · subject CN=discord.com
- HTTP requests captured: 72
- Scan tier: fast · observed 2026-08-21 02:58:53 UTC
Redirect chain
https://discord.gg/aurorafuhttps://discord.com/invite/aurorafu
Malware communicating with this URL (17)
These samples were observed contacting or being served from discord.com. Each links to its full analysis.
- Note - referenced ·
25e1577ccee5bc33d5273e5d4aec9442· first seen 2026-08-20 - Emotet - contacted ·
64340a095707345c63b0f8e6faa080ee· first seen 2026-08-20 - Bulz - contacted ·
74fb601f4970e34fdccae66aaddc5e8c· first seen 2026-08-20 - Msilzilla - referenced ·
0560b8d7e869d337ff699b785db35898· first seen 2026-08-19 - Coinminer - referenced ·
0bbee3979b0327b6c327c4522414a90d· first seen 2026-08-16 - Mirai - referenced ·
e109c0b30c8602942c7893b0e10c8ff1· first seen 2026-08-16 - Mirai - referenced ·
cb5d4f001a00b42ff3bd082528c9a205· first seen 2026-08-15 - Mirai - referenced ·
c5cd54b142b788d40fcfdb983f6ef201· first seen 2026-08-15 - Mirai - referenced ·
c1830b4c48710a67315f933ced4247f3· first seen 2026-08-15 - Mirai - referenced ·
c08f60a2df802395b9eff8d2d1cdfa31· first seen 2026-08-15 - Mirai - referenced ·
bae38ec3836dcd3831a8ae4173ccb9fb· first seen 2026-08-15 - Mirai - referenced ·
a42bc2b1c97c01e02a96622e68631a75· first seen 2026-08-15 - Disstl - referenced ·
79b0b54b9210b13630c71a37822c0061· first seen 2026-08-14 - Mirai - referenced ·
876fb6f7344673b9d619bc60e68d7cd6· first seen 2026-08-14 - Ursu - referenced ·
e922a5842b5e5576be7e6a2301794495· first seen 2026-08-13
Antivirus & YARA (0 of 47 engines)
No engine flagged this page's content.
Why this verdict
- Valid TLS, no impersonation or off-origin credential post
Detected technologies
- Cloudflare
Contacted infrastructure
- 162.159.136.232 - AS13335 Cloudflare, Inc. (United States)
- 162.159.130.234 - AS13335 Cloudflare, Inc. (United States)
Observed indicators
- discord.com
- 162.159.136.232
- 162.159.130.234
- https://discord.com/invite/aurorafu
- https://discord.com/assets/web-minimal.91e957333ce459bc.js
- https://discord.com/assets/73552.0d860c86494ab501.js
- https://discord.com/assets/824892.07b032d4e93c9844.js
- https://discord.com/assets/41814.16b66adbca89c196.js
- https://discord.com/assets/865006.da18521aad3868d2.js
- https://discord.com/assets/950772.5b1dd16cfec980c8.js
- https://discord.com/assets/867880.717e989d33edf208.js
- https://discord.com/assets/124901.c7333e3786e0ef9b.js
- https://discord.com/assets/682023.b937ce83a8c33a5a.js
- https://discord.com/assets/97752.0d8feb66d0d9166b.js
- https://discord.com/assets/885309.cef88539ed431411.js
- https://discord.com/assets/512406.9cb074635a9edd8c.js
- https://discord.com/assets/897963.7b0356488333111d.js
- https://discord.com/assets/585764.8a364393ef260f56.js
- https://discord.com/assets/448095.dc6bbfd7f460e0cc.js
- https://discord.com/assets/675667.af4f00d6c1646611.js
Other scans of discord.com (10)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 24 Aug 2026 - benign ·
https://discord.com/invite/tHxvYvWZV8 - 23 Aug 2026 - benign ·
https://discord.com/api/webhooks/907787402825846854/HlY-UlzKxoZqpAuwa6BmnqiAjrEUCXC8x76pk1yCYVrHBZJY - 23 Aug 2026 - benign ·
https://cdn.discordapp.com/ - 23 Aug 2026 - benign ·
https://discord.com/ - 23 Aug 2026 - unknown ·
https://discord.com/invite/aHGxa3w5P9 - 23 Aug 2026 - unknown ·
https://cdn-discordapp.1997dlz.workers.dev/ - 22 Aug 2026 - benign ·
https://discord.com/invite/NNyERzg2Vy - 22 Aug 2026 - benign ·
https://discord.com/ - 22 Aug 2026 - benign ·
https://discord.com/invite/QTVGKBB - 22 Aug 2026 - benign ·
https://cdn.discordapp.com/
Questions about discord.com
- Is discord.com safe?
- The scan of discord.com on 21 Aug 2026 found no evidence of harm. That is the absence of a finding at one point in time, not a guarantee: a page can change, and a scan only sees what it was served.
- What malware is associated with discord.com?
- 17 analysed samples communicate with this URL, including Note, Emotet, Bulz, Msilzilla.
- How was discord.com checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of discord.com
Scanned on MalwareAnalyzer by Cyble · Open interactive scan