ScanMalware.com

Security Scan Report: discodus.com

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/360b7e5c-c440-41d3-b9eb-91e93472920eDomain and IP registration (RDAP)/api/v1/rdap/360b7e5c-c440-41d3-b9eb-91e93472920eHow often this domain was scanned/api/v1/domain/stats/discodus.comScan history for this domain/api/v1/domain/history/discodus.com?limit=15
This website contacted 249 IPs in 11 countries across 177 domains to perform 807 HTTP transactions. The main domain is discodus.com and was registered 3 years ago.

Submitted URL: https://discodus.com/server/1550245876163936359

AI Security Verdict

Moderate Risk

Confidence: 62%

4
Risk Score

Established, self-branded Discord server directory with no forms, no brand impersonation and no threat-intel hits; only concerns are a 66-hop ad redirect chain and off-platform Telegram contact lures in user listings.

Risk Factors (4)
Excessive redirect chain: 66 redirects with 47 crossing domains — a signal in itself, not a verdict
Heavy ad-tech monetization stack (doubleclick, tribalfusion, dns-finder, ad-delivery.net, nitropay, amazon-adsystem) inflates the redirect chain and third-party data sharing
Listing content pushes contact off-platform to Telegram/Zangi handles, a common pattern for advance-fee or off-platform scams
Unranked in Cisco Umbrella (weak prior only)
Safety Factors (5)
Established registration age (over 3 years) with Terms of Service and Privacy Policy present
Site displays its own brand ('Discodus') matching the domain and explicitly states it is not affiliated with, endorsed or sponsored by Discord
Zero credential, password or payment forms — any 'LOGIN' link is a same-origin dashboard route
No Indicators of Compromise, no JavaScript YARA malware, no known-kit match, no credential exfiltration
Network IDS alerts are Discord-domain observations and generic informational heuristics, not malware or phishing detections
Domain age information unavailable

Details

Page Title

Group Discord Server

Scan Type

public

Domain Name Analysis

The domain 'discodus.com' uses the commercial generic top-level domain (.com) with no subdomain. Its registrable label 'discodus' stretches across 8 characters with 3 vowels and 5 consonants. Segmentation suggests three words: disco, du, s. Median word length comes out to 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://discodus.com/server/1550245876163936359

Page Load Overview

4.78s
Total Load Time
10.6 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:1,726 chars
Detector Agreement:100%

Website Classification

Primary Category

social media network85% confidence
Type: spa
Method: ml+structural

All Detected Categories

social media network
85%
entertainment media
50%
technology software
49%
blog personal website
47%
government public service
47%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
63104.21.80.109Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3172.67.179.103Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.251.110.97Google · CDNUnited States
AS15169Google LLC
3104.18.3.78Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3162.159.135.233Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3104.16.80.73Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
335.244.144.25Google · CDNKansas City, Missouri, United States
AS396982Google LLC
3143.204.181.97Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
3142.251.110.157Google · CDNUnited States
AS15169Google LLC
3216.239.34.36Google · CDNUnited States
AS15169Google LLC
807249--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T142F3E874C9D2516E349F096AEA60F30E4BABE587E5924F2071FC7474D7D98C89C8B8C8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:clOIu7gGZGdvpFyNZR1PFD/a6ysEXiMkSlwGFjfx8+2xVgLBpBgNU0:clOIu7gGZGdvpFyNZR1PFD/XU0

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:157895:4hECoUjkASAIAEwgIPcI4PAQsggHEgoQKTZKHQUEEigRWIjKQoRwAACV0CgA4BDEFVgiQRNRywQDQgCRiEIgAACYSMjCEcKB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffd31810181800
Perceptual Hash:cceef3f832282a26
Difference Hash:33b227323232320c
Wavelet Hash:fffff71918181800
Color Hash:#2d8665

Other Hashes

Crop Resistant:33b227323232320c

Scan History

Scan history not available

Unable to load historical scan data