cdn.discordapp.com

Classification: Whitelisted

cdn.discordapp.com is a whitelisted (trusted) hostname. Reported by 5 threat sources, last seen 2026-09-01.

Current activity

  • Offline — no longer resolving. Last online 2026-09-01 20:55:41.
  • Command & Control server — Used by cybercriminals to control victim computers.
  • Malware distribution — This indicator is distributing malware.

MITRE ATT&CK associations

Malware families: LUMMA STEALER (S1213) REDLINE STEALER (S1240) WANNACRY (S0366) REMCOS (S0332) CHAOS (S0220) NANOCORE (S0336) DARKCOMET (S0334) XLOADER (S1207) MIMIKATZ (S0002) ASYNCRAT (S1087)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Suspicious URL Triage 2026-04-24 14:07:20 2026-09-01 20:34:39 anomalous-activity malicious-activity
Silentnet Triage 2026-07-30 20:13:58 2026-09-01 15:06:28 malicious-activity
Asyncrat Triage 2026-02-04 01:31:51 2026-08-31 15:25:23 malicious-activity S1087 AsyncRAT
Malware Download URLhaus Abuse.ch 2023-11-10 08:00:10 2026-08-31 08:16:08 malicious-activity malware
Darksiderat Triage 2026-03-25 04:07:20 2026-08-30 13:06:26 malicious-activity
Mercurialgrabber Triage 2026-08-29 21:37:49 2026-08-29 21:37:49 malicious-activity
Salatstealer Triage 2026-01-31 10:40:05 2026-08-29 12:47:43 malicious-activity
Xworm Triage 2026-02-17 13:40:18 2026-08-26 20:20:31 malicious-activity
Top Popularity Site Cisco Umbrella 2024-10-05 01:31:47 2026-08-24 01:16:34 benign
Xmrig Triage 2026-02-28 19:23:48 2026-08-21 06:08:40 malicious-activity
Ratonrat Triage 2026-07-05 18:40:02 2026-08-19 16:23:25 malicious-activity
Overlord Triage 2026-06-12 01:02:25 2026-08-16 19:32:42 malicious-activity
Killmbr Triage 2026-04-22 09:48:06 2026-08-16 13:03:43 malicious-activity
Mimikatz Triage 2026-08-15 03:59:36 2026-08-15 03:59:36 malicious-activity S0002 Mimikatz
Formbook Triage 2026-08-03 09:57:17 2026-08-06 07:05:38 malicious-activity S1207 XLoader
Blankgrabber Triage 2026-02-06 20:59:52 2026-08-01 00:42:04 malicious-activity
Donutloader Triage 2026-02-25 19:39:06 2026-07-30 03:43:40 malicious-activity
Masslogger Triage 2026-05-12 15:43:16 2026-07-29 06:30:53 malicious-activity
Antarctida_stealer Triage 2026-07-27 09:59:25 2026-07-27 09:59:25 malicious-activity
Xorium_stealer Triage 2026-07-27 04:27:30 2026-07-27 04:27:30 malicious-activity
Bruteratel Triage 2026-07-04 22:05:30 2026-07-04 22:05:30 malicious-activity
Hijackloader Triage 2026-06-28 15:01:04 2026-06-28 15:01:04 malicious-activity
Umbral Triage 2026-06-27 21:07:20 2026-06-27 21:07:20 malicious-activity
Darkcomet Triage 2026-06-23 16:46:07 2026-06-23 16:46:07 malicious-activity S0334 DarkComet
Chromelevator Triage 2026-05-24 20:58:10 2026-06-21 09:00:21 malicious-activity
Quasar Triage 2026-02-05 11:51:25 2026-06-20 23:13:28 malicious-activity
Phantom_stealer Triage 2026-05-13 11:42:14 2026-06-05 22:26:05 malicious-activity
Pkg Triage 2026-06-01 00:04:17 2026-06-01 00:04:17 malicious-activity
Nanocore Triage 2026-05-28 05:45:46 2026-05-28 05:45:46 malicious-activity S0336 NanoCore
Remus_stealer Triage 2026-05-26 14:23:55 2026-05-26 14:23:55 malicious-activity
Discordrat Triage 2026-02-27 20:26:58 2026-05-24 20:46:26 malicious-activity
Matched manual whitelist entry Maltiverse 2026-05-09 04:27:59 2026-05-09 04:27:59
Hawkeye Triage 2026-05-01 17:09:32 2026-05-01 17:09:32 malicious-activity
Stealc Triage 2026-04-24 20:21:27 2026-04-24 20:21:27 malicious-activity
Malicious URL Triage 2026-01-30 17:27:03 2026-04-21 10:05:11 malicious-activity
Chaos Triage 2026-04-16 01:19:58 2026-04-18 05:34:04 malicious-activity S0220 Chaos
Santa_stealer Triage 2026-04-17 12:14:44 2026-04-17 12:14:44 malicious-activity
Nightingale Triage 2026-04-15 19:11:31 2026-04-15 19:11:31 malicious-activity
Luna_stealer Triage 2026-04-13 16:56:13 2026-04-13 16:56:13 malicious-activity
Cryptolocker Triage 2026-04-03 00:25:52 2026-04-03 00:25:52 malicious-activity
Remcos Triage 2026-03-27 14:27:46 2026-03-27 14:27:46 malicious-activity S0332 Remcos
Wannacry Triage 2026-02-11 22:04:51 2026-02-25 02:18:02 malicious-activity S0366 WannaCry
Sentinelrat Triage 2026-02-20 22:07:20 2026-02-20 22:23:16 malicious-activity
Unknown Loader ThreatFox Abuse.ch 2025-04-17 07:17:07 2025-08-25 15:17:06 malicious-activity
RedLine Stealer ThreatFox Abuse.ch 2023-11-12 18:17:02 2024-11-01 15:17:04 malicious-activity S1240 RedLine Stealer
MetaStealer ThreatFox Abuse.ch 2023-11-25 04:17:03 2023-11-27 03:18:15 malicious-activity
Lumma Stealer ThreatFox Abuse.ch 2023-11-15 18:17:03 2023-11-17 17:18:19 malicious-activity S1213 Lumma Stealer

Tags

2023 discord chatnoir stealer lummac2 stealer rar dropped-by-privateloader redlinestealer coinminer none epsilonstealer agenttesla bbystealer 1234 remcosrat dropped-by-smokeloader password-protected bookinggoogledrive exe bootstrapper discordapp azorult recordstealer rekoobe ascii donutloader ua-wget lummastealer cryptbot discordrat rustystealer agenttelsa guloader blankgrabber shortloader rat asyncrat c2 discovery persistence privilege_escalation ransomware salatstealer defense_evasion upx execution spyware adware trojan themida bootkit 29 installer quasar office04 credential_access pyinstaller evasion phishing impact wannacry worm xworm sentinelrat dropper vmprotect xmrig exploit miner loader google motw rootkit discord sniper macos collection xbinder darksiderat remcos cryptolocker antivm linux luna_stealer nightingale agilenet chaos santa_stealer killmbr wiper stealc hawkeye keylogger masslogger phantom_stealer c2-monitor-auto dropped-by-amadey mgbuka_obosi_2026 suricata chromelevator hacktool remus_stealer 15ae2106164a9b0a970bdd21bdae8157 nanocore pkg overlord remotehost malware costura packer darkcomet floxif warzonerat guest1111 backdoor infostealer rezer0 android umbral hijackloader bruteratel ratonrat xorium_stealer antarctida_stealer destiny_stealer stormkitty command_and_control silentnet formbook node mimikatz mercurialgrabber opaaaaaaaaa

IP addresses resolved by this hostname

Whois information

AS name
AS13335 Cloudflare, Inc.
Domain
discordapp.com
TLD
com
DNSSEC
['signedDelegation']
Nameservers
GABE.NS.CLOUDFLARE.COM, SIMA.NS.CLOUDFLARE.COM, gabe.ns.cloudflare.com, sima.ns.cloudflare.com
Registrant
Cloudflare, Inc.
Address
DATA REDACTED
City
DATA REDACTED
State
CA
Country
US — United States 🇺🇸
Contact email
[email protected], [email protected]
Domain created
2015-02-26 22:47:43
Domain expires
2027-02-26 22:47:43
First indexed
2023-11-10 08:20:49
Last updated
2026-09-01 20:55:41