Phishing Links, Fake Nitro Scams & Mirror Pages
Directive Objective
Section titled “Directive Objective”Eliminate deceptive phishing links, cloned authentication pages, and social engineering lures designed to hijack user accounts or credentials.
1. Scope and Policy Coverage
Section titled “1. Scope and Policy Coverage”This directive strictly prohibits:
- Typosquatting & Mirror Domains: Links imitating official Discord URLs with subtle misspellings (e.g.,
discorcl.gift,dlscord-app.info,discordnitro.site). - Fake Nitro Gift Lures: Automated bots or compromised accounts posting messages claiming “Free Discord Nitro 3 Months from Steam!” or similar bait.
- Malicious QR Code Scams: Persuading users to scan a QR code using the Discord mobile app under the guise of “verification,” which actually authorizes an attacker’s remote login.
- Fake Steam / Tournament Phishing: Directing users to fake Steam Community login pages claiming to vote for an esports team.
2. Exclusion Boundaries and Scope Limits
Section titled “2. Exclusion Boundaries and Scope Limits”- Broken / Expired URLs: Legitimate websites that return 404 errors or have temporary SSL certificate expiration warnings without deceptive fraudulent intent.
- Official Discord Promotions: Official links hosted on
discord.com,discord.gg, or verified partner platforms.
3. AutoMod Rule Recommendation
Section titled “3. AutoMod Rule Recommendation”Implement regex filters to intercept common fake Nitro patterns:
(?i)(discord[a-z0-9\-]*\.(gift|info|site|ru|click|top))Configure AutoMod to Block Message, Timeout User for 1 Hour, and Alert Staff.