This repo contains a readable sorted list.txt of known Discord phishing urls. Those links are used by scammers/userbots for stealing users login/password data, IP addresses and/or download malicious software. If a friend of yours sends you some link with some text like "free nitro from discord/steam", "join the discord moderator" or "hypesquad is recruiting" or anything like this with some URL, be careful, they might have been hacked. Some of those websites might install malware in your PC downloading your Discord cookie/auth key, allowing scammers to send links with your account/name to servers and friends. Be careful NOT to open those links for ANY reason, even if a friend of yours asks you to do so.
You may want to check the official domain list and compare those links to see if they are legit or not.
A Pi-Hole adlist file is included and will automatically block your browser from loading those domains, you can use Pi-Hole with a RaspberryPi as a global DNS within your router, more instructions in their page. A Discord bot is also included which takes actions on this links, read more on Discord Blacklist Bot.
- discord-scam-links by BuildBot42
- scam-links by DevSpen
- WHOIS Newly registered domains
- Other sources from public servers and contributors.
I'll add links when I find new ones, feel free to PR/Issue if you want to contribute. I'm not planning to remove those links even if they won't work anymore, domains can last even years, I doubt Discord/Steam will buy those fake domains for official purposes and if they will, I'll remove them accordingly.
You can add my bot for automatically ban those links and there is also a Pi-Hole file which you can use in order to block those malicious domains with your Pi-Hole DNS.
Phades is a Discord bot which detects links from this list. You can invite the bot by clicking this link. Phades will not collect any data from messages or users. If you find new domains that the bot doesn't detect, please let me know so I can add them in the blacklist file, thank you!
When a link containing a domain from the message is detected, Phades will kick the user by default. You may change this setting by using !p in a text channel, you need admin permissions (or being the server owner) to do so. There is also a link shortener detection system which works the same as the phishing system, you may change the bot's behaviour by using !s in a text channel. By default it will do nothing to users, you can see your current options with !c, and get a full list of commands with !help/!info.
You can undo bans from Discord -> Server Settings -> User Management section -> Bans. If you have feedback it's appreciated. Phades will be open source once more features will be introduced.
This invite url will add Phades to your server with some permissions, it DOES NOT use administrator. If you want to esclude a channel from the bot, just block Phades' "view messages" permissions to that text channel.