The scan of discord.com on 21 Aug 2026 found no evidence of harm. That is the absence of a finding at one point in time, not a guarantee: a page can change, and a scan only sees what it was served.

What malware is associated with discord.com?

17 analysed samples communicate with this URL, including Note, Emotet, Bulz, Msilzilla.

How was discord.com checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

discord.com - URL scan, 21 Aug 2026

MalwareAnalyzer by Cyble scanned discord.com and returned a benign verdict (score 0). The page resolved to 162.159.135.232 on Cloudflare, Inc. in US. The domain was registered 9418 days ago through Cloudflare, Inc.. 1 domain and 1 IP were contacted, over 737 HTTP requests. 17 malware samples communicate with this URL (Note, Emotet, Bulz, Msilzilla). This is a point-in-time observation from 21 Aug 2026; the page may have changed since.

Scan result

Verdict: benign (score 0) · Confidence 15%
Scanned URL: https://discord.com/invite/sKaDgc6
Domain: discord.com · IP: 162.159.135.232 · AS13335 · US
Server: cloudflare
Page title: Kanetrixova Family 🌴
HTTP status: 200 · text/html
Registrar: Cloudflare, Inc. · domain age 9418 days · created 2000-11-06
TLS issuer: C=US, O=Google Trust Services, CN=WE1 · valid to Sep 28 21: · subject CN=discord.com
HTTP requests captured: 737 · cookies set: 4
Scan tier: standard · observed 2026-08-21 01:46:03 UTC

Malware communicating with this URL (17)

These samples were observed contacting or being served from discord.com. Each links to its full analysis.

Note - referenced · 25e1577ccee5bc33d5273e5d4aec9442 · first seen 2026-08-20
Emotet - contacted · 64340a095707345c63b0f8e6faa080ee · first seen 2026-08-20
Bulz - contacted · 74fb601f4970e34fdccae66aaddc5e8c · first seen 2026-08-20
Msilzilla - referenced · 0560b8d7e869d337ff699b785db35898 · first seen 2026-08-19
Coinminer - referenced · 0bbee3979b0327b6c327c4522414a90d · first seen 2026-08-16
Mirai - referenced · e109c0b30c8602942c7893b0e10c8ff1 · first seen 2026-08-16
Mirai - referenced · cb5d4f001a00b42ff3bd082528c9a205 · first seen 2026-08-15
Mirai - referenced · c5cd54b142b788d40fcfdb983f6ef201 · first seen 2026-08-15
Mirai - referenced · c1830b4c48710a67315f933ced4247f3 · first seen 2026-08-15
Mirai - referenced · c08f60a2df802395b9eff8d2d1cdfa31 · first seen 2026-08-15
Mirai - referenced · bae38ec3836dcd3831a8ae4173ccb9fb · first seen 2026-08-15
Mirai - referenced · a42bc2b1c97c01e02a96622e68631a75 · first seen 2026-08-15
Disstl - referenced · 79b0b54b9210b13630c71a37822c0061 · first seen 2026-08-14
Mirai - referenced · 876fb6f7344673b9d619bc60e68d7cd6 · first seen 2026-08-14
Ursu - referenced · e922a5842b5e5576be7e6a2301794495 · first seen 2026-08-13

Antivirus & YARA (0 of 47 engines)

No engine flagged this page's content.

Why this verdict

Valid TLS, no impersonation or off-origin credential post

Detected technologies

Cloudflare

Contacted infrastructure

162.159.135.232 - AS13335 Cloudflare, Inc. (United States)

Observed indicators

discord.com
162.159.135.232
https://discord.com/invite/sKaDgc6
https://discord.com/invite/sKaDgc6?locale=cs
https://discord.com/invite/sKaDgc6?locale=ar
https://discord.com/invite/sKaDgc6?locale=zh-TW
https://discord.com/invite/sKaDgc6?locale=zh-CN
https://discord.com/invite/sKaDgc6?locale=de
https://discord.com/invite/sKaDgc6?locale=hr
https://discord.com/invite/sKaDgc6?locale=da
https://discord.com/invite/sKaDgc6?locale=hu
https://discord.com/invite/sKaDgc6?locale=lt
https://discord.com/invite/sKaDgc6?locale=ja
https://discord.com/invite/sKaDgc6?locale=es-419
https://discord.com/invite/sKaDgc6?locale=he
https://discord.com/invite/sKaDgc6?locale=no
https://discord.com/invite/sKaDgc6?locale=uk
https://discord.com/invite/sKaDgc6?locale=hi
https://discord.com/invite/sKaDgc6?locale=nl
https://discord.com/invite/sKaDgc6?locale=fr

Other scans of discord.com (10)

This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.

24 Aug 2026 - benign · https://discord.com/invite/tHxvYvWZV8
23 Aug 2026 - benign · https://discord.com/api/webhooks/907787402825846854/HlY-UlzKxoZqpAuwa6BmnqiAjrEUCXC8x76pk1yCYVrHBZJY
23 Aug 2026 - benign · https://cdn.discordapp.com/
23 Aug 2026 - benign · https://discord.com/
23 Aug 2026 - unknown · https://discord.com/invite/aHGxa3w5P9
23 Aug 2026 - unknown · https://cdn-discordapp.1997dlz.workers.dev/
22 Aug 2026 - benign · https://discord.com/invite/NNyERzg2Vy
22 Aug 2026 - benign · https://discord.com/
22 Aug 2026 - benign · https://discord.com/invite/QTVGKBB
22 Aug 2026 - benign · https://cdn.discordapp.com/

Questions about discord.com

Is discord.com safe?: The scan of discord.com on 21 Aug 2026 found no evidence of harm. That is the absence of a finding at one point in time, not a guarantee: a page can change, and a scan only sees what it was served.
What malware is associated with discord.com?: 17 analysed samples communicate with this URL, including Note, Emotet, Bulz, Msilzilla.
How was discord.com checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of discord.com

Scanned on MalwareAnalyzer by Cyble · Open interactive scan