Scam Detective
Domain

cdn.discordapp.com

First seen Feb 22, 2026

High Risk
  • Flagged by Google Safe Browsing
  • No SSL certificate
  • WHOIS registration hidden

Campaign Intelligence

This cluster centers on 2382 connected domains tagged as PureHVNC, elf, sh. 572 of these domains have been flagged by threat intelligence feeds including Google Safe Browsing and URLhaus. The connected infrastructure includes 969 phone numbers (8772427372, 1319641540, 1319641221) with 557 FTC complaints; 690 email addresses (kellymoore_64@yahoo.com, schantzsybg7@aol.com, online.motors@consultant.com). Across all linked entities, consumers have filed 2228 complaints with federal agencies. Geog...

This cluster centers on 2396 connected domains tagged as 156-233-71-230, Quakbot, lnk. 586 of these domains have been flagged by threat intelligence feeds including Google Safe Browsing and URLhaus. The connected infrastructure includes 969 phone numbers (8772427372, 1319641540, 1319641221) with 565 FTC complaints; 690 email addresses (kellymoore_64@yahoo.com, schantzsybg7@aol.com, online.motors@consultant.com). Across all linked entities, consumers have filed 2237 complaints with federal agen...

This cluster centers on 1895 connected domains tagged as BeaverTail, RedLineStealer, password: 2026. 113 of these domains have been flagged by threat intelligence feeds including Google Safe Browsing and URLhaus. The connected infrastructure includes 934 phone numbers (8772427372, 1319641540, 1319641221) with 524 FTC complaints; 683 email addresses (kellymoore_64@yahoo.com, schantzsybg7@aol.com, online.motors@consultant.com). Across all linked entities, consumers have filed 2093 complaints wit...

This cluster centers on 2416 connected domains tagged as BABADEDA, WallStealer, meterpreter. 607 of these domains have been flagged by threat intelligence feeds including Google Safe Browsing and URLhaus. The connected infrastructure includes 969 phone numbers (5086371451, 9366439335, 1842506726) with 570 FTC complaints; 690 email addresses (kellymoore_64@yahoo.com, schantzsybg7@aol.com, online.motors@consultant.com). Across all linked entities, consumers have filed 2243 complaints with federa...

This cluster centers on 2764 connected domains tagged as BeaverTail, Kaiji, fbf543. 645 of these domains have been flagged by threat intelligence feeds including Google Safe Browsing and URLhaus. The connected infrastructure includes 1132 phone numbers (7638857447, 8664372914, 2157987305) with 10266 FTC complaints; 146 companies (JPMORGAN CHASE & CO., Advanced Resolution Services Inc., EVERBANK, NATIONAL ASSOCIATION) with 8616274 CFPB complaints; 298 email addresses (xxxxxxxxxxxxxxxxxxxxxxxx@vm...

This cluster centers on 3287 connected domains tagged as HijackLoader, RemcosRAT, screenconnect. 617 of these domains have been flagged by threat intelligence feeds including Google Safe Browsing and URLhaus. The connected infrastructure includes 1649 phone numbers (5408463620, 8552597377, 8007873903) with 7110 FTC complaints; 143 companies (Informative LLC, HomePlus Corporation, Doral Capital Corporation) with 8547081 CFPB complaints; 807 email addresses (kellymoore_64@yahoo.com, schantzsybg7@...

This cluster centers on 2874 connected domains tagged as QuasarRAT, StealitStealer, pw-k53mv9bc. 652 of these domains have been flagged by threat intelligence feeds including Google Safe Browsing and URLhaus. The connected infrastructure includes 1375 phone numbers (2157987305, 2025069230, 2028641298) with 14635 FTC complaints; 160 companies (JPMORGAN CHASE & CO., Advanced Resolution Services Inc., EVERBANK, NATIONAL ASSOCIATION) with 8680419 CFPB complaints; 299 email addresses (abuse@fb.com, ...

Details

Registrar
Cloudflare, Inc.
Registration Date
2/26/2015
Safe Browsing
malware
First Seen
2/22/2026

Related Domains

Community Reports

I clicked on a discord cdn phishing link I just clicked on a cdn.discordapp.com png image file link I think it downloaded the image file since I can still see it while I'm not connected to the internet I ran anti-virus andvI uninstalled discord and changed my email passwords, but I am worried that my CC info might be taken since I have it on auto fill. How much damage could an image phishing link do?

1745 days ago

I clicked on a discord cdn phishing link I just clicked on a cdn.discordapp.com png image file link I think it downloaded the image file since I can still see it while I'm not connected to the internet I ran anti-virus andvI uninstalled discord and changed my email passwords, but I am worried that my CC info might be taken since I have it on auto fill. How much damage could an image phishing link do?

1745 days ago

Fresh load of active tech support scammers https://cdn.discordapp.com/attachments/337775503413084161/354078349536133120/VirtualBox_Windows_Vista_03_09_2017_21_40_26.png -------------------------------------------------------------------------- https://cdn.discordapp.com/attachments/337775503413084161/354078509620133889/VirtualBox_Windows_Vista_03_09_2017_21_41_28.png -------------------------------------------------------------------------- https://cdn.discordapp.com/attachments/337775503413084161/354078930325602314/VirtualBox_Windows_Vista_03_09_2017_21_43_08.png -------------------------------------------------------------------------- https://cdn.discordapp.com/attachments/337775503413084161/352971888038903818/VirtualBox_Windows_Vista_31_08_2017_20_24_03.png -------------------------------------------------------------------------- https://cdn.discordapp.com/attachments/337775503413084161/352902647113580545/VirtualBox_Windows_Vista_31_08_2017_15_49_00.png -------------------------------------------------------------------------- https://cdn.discordapp.com/attachments/337775503413084161/352900740282449921/VirtualBox_Windows_Vista_31_08_2017_15_34_37.png -------------------------------------------------------------------------- All numbers were tested at the time of posting. Comment below and let me know if any numbers have been changed. Thanks. Happy scambaiting.

3125 days ago4 upvotes

Only a small list of fresh numbers (w/ pictures) https://cdn.discordapp.com/attachments/337775503413084161/351402379050090517/VirtualBox_Windows_Vista_27_08_2017_12_26_14.png Source: Misspelling youtube *This number is nearly the only one popping up today, so they should be active for a while* -------------------------------------------------------------------------- https://cdn.discordapp.com/attachments/337775503413084161/351407113966452736/wiki.png Source: Misspelling wikipedia -------------------------------------------------------------------------- BONUS: Advance System Care. An antivirus/antimalware that will always say your computer has issues, regardless of it being a fresh VM. https://cdn.discordapp.com/attachments/337775503413084161/351407094328459274/VirtualBox_Windows_Vista_27_08_2017_12_31_22.png Source: Misspelling wikipedia -------------------------------------------------------------------------- Sorry I couldn't provide more, it seems pretty dried out today. Happy scambaiting :) All numbers were tested at the time of posting, if a number is not working comment below and I will remove it from the list. I will be doing this until I post the next list of numbers. Upvote for visibility if these numbers have helped at all.

3134 days ago5 upvotes

Another load of fresh tech support scammers (w/ pictures) All numbers sources are from Misspelling different variants of youtube, unless stated otherwise. -------------------------------------------------------------------------- https://cdn.discordapp.com/attachments/337775503413084161/350651653537398799/VirtualBox_Windows_Vista_25_08_2017_10_44_20.png -------------------------------------------------------------------------- https://cdn.discordapp.com/attachments/337775503413084161/350824599761584138/VirtualBox_Windows_Vista_25_08_2017_22_11_09.png -------------------------------------------------------------------------- https://cdn.discordapp.com/attachments/337775503413084161/350845449847963648/VirtualBox_Windows_Vista_25_08_2017_23_33_36.png -------------------------------------------------------------------------- https://cdn.discordapp.com/attachments/337775503413084161/351100338666995712/IMG_20170826_162635.jpg These guys in particular really pissed me off and froze my computer -------------------------------------------------------------------------- https://cdn.discordapp.com/attachments/337775503413084161/351115128604721152/VirtualBox_Windows_Vista_26_08_2017_17_24_00.png -------------------------------------------------------------------------- https://cdn.discordapp.com/attachments/337775503413084161/351115128604721152/VirtualBox_Windows_Vista_26_08_2017_17_24_00.png -------------------------------------------------------------------------- https://cdn.discordapp.com/attachments/337775503413084161/351117711230631936/VirtualBox_Windows_Vista_26_08_2017_17_36_12.png Number is in the URL -------------------------------------------------------------------------- https://cdn.discordapp.com/attachments/337775503413084161/351118030178353161/VirtualBox_Windows_Vista_26_08_2017_17_37_31.png -------------------------------------------------------------------------- https://cdn.discordapp.com/attachments/337775503413084161/351118980276158466

3135 days ago11 upvotes

Share Your Experience

What's Your Exposure?

Know your risk exposure to this message with a Thorough Analysis. It returns a detailed report covering the complaint history, your data breach exposure, related scam entities, and risk signals tied to this email message. Check the box and enter your email address now.

Proton Pass Unique passwords for every account

After a breach, reused passwords let attackers into your other accounts. Proton Pass generates and stores a unique password for each one.