discord.com
Classification: Whitelisted
discord.com is a whitelisted (trusted) hostname. Reported by 8 threat sources, last seen 2026-08-16. IoC context and downloadable threat intel on Maltiverse.
Current activity
- Offline — no longer resolving. Last online 2026-08-16 02:56:46.
- Malware distribution — This indicator is distributing malware.
MITRE ATT&CK associations
Malware families: AGENT TESLA (S0331)
Blacklist sightings showing the 100 most recent of 154
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Floxif | Triage | 2026-08-16 02:28:06 | 2026-08-16 02:28:06 | malicious-activity | |
| Darkcomet | Triage | 2026-07-21 22:26:04 | 2026-07-21 22:26:04 | malicious-activity | |
| Umbral | Triage | 2026-06-25 16:18:21 | 2026-06-25 16:18:21 | malicious-activity | |
| Suspicious URL | Triage | 2026-06-11 22:56:28 | 2026-06-11 22:56:28 | anomalous-activity | |
| Unknown malware | ThreatFox Abuse.ch | 2024-06-20 02:20:13 | 2026-05-28 12:25:04 | malicious-activity | |
| Crimsonrat | Triage | 2026-05-07 16:32:21 | 2026-05-07 16:32:21 | malicious-activity | |
| Malicious URL | Triage | 2026-02-04 18:32:38 | 2026-04-20 17:40:49 | malicious-activity | |
| Top Popularity Site | Tranco | 2026-02-10 07:56:26 | 2026-03-17 00:01:48 | ||
| Houdini | ThreatFox Abuse.ch | 2025-09-02 00:18:39 | 2025-09-02 00:18:39 | malicious-activity | |
| Unknown Loader | ThreatFox Abuse.ch | 2025-05-12 21:17:04 | 2025-08-25 15:17:06 | malicious-activity | |
| Top Popularity Site | Cisco Umbrella | 2022-07-18 20:31:57 | 2025-08-10 15:14:47 | benign | |
| XWorm | ThreatFox Abuse.ch | 2025-07-29 06:17:06 | 2025-07-29 06:17:06 | malicious-activity | |
| Umbral | ThreatFox Abuse.ch | 2025-07-16 01:17:03 | 2025-07-16 01:17:03 | malicious-activity | |
| Venom RAT | ThreatFox Abuse.ch | 2025-06-16 09:17:03 | 2025-06-16 09:17:03 | malicious-activity | |
| BlankGrabber | ThreatFox Abuse.ch | 2025-05-06 06:17:47 | 2025-05-06 06:17:47 | malicious-activity | |
| Malware Download | URLhaus Abuse.ch | 2022-03-10 21:15:28 | 2024-08-30 15:20:08 | malicious-activity | |
| Malicious URL | Hybrid-Analysis | 2023-08-31 14:15:04 | 2023-11-27 12:00:03 | ||
| Agent Tesla | ThreatFox Abuse.ch | 2023-05-29 16:17:05 | 2023-07-12 17:17:10 | malicious-activity | S0331 Agent Tesla |
| Safe Site | Cisco Umbrella | 2022-07-14 23:26:40 | 2022-07-16 01:16:56 | benign | |
| Alexa Top 1 Million | Alexa | 2020-04-27 22:17:00 | 2022-07-14 00:06:59 | benign | |
| Malware | Hybrid-Analysis | 2021-01-16 20:30:06 | 2022-01-25 12:00:17 | ||
| Trojan.Generic | Hybrid-Analysis | 2020-07-17 17:45:28 | 2022-01-23 18:30:10 | ||
| IL:Trojan.MSILZilla | Hybrid-Analysis | 2021-10-25 13:45:06 | 2022-01-20 01:15:23 | ||
| Gen:Variant.Bulz | Hybrid-Analysis | 2020-10-07 20:15:18 | 2022-01-18 15:45:49 | ||
| Trojan.Autoruns.GenericKD | Hybrid-Analysis | 2022-01-18 09:16:21 | 2022-01-18 09:16:21 | ||
| Gen:Variant.Razy | Hybrid-Analysis | 2020-07-02 20:15:17 | 2022-01-16 14:45:07 | ||
| Python.Stealer | Hybrid-Analysis | 2022-01-12 04:00:06 | 2022-01-12 04:00:06 | ||
| Trojan.Stealer | Hybrid-Analysis | 2022-01-11 20:15:25 | 2022-01-11 20:15:25 | ||
| Malicious site | Hybrid-Analysis | 2020-10-28 05:00:13 | 2022-01-07 18:15:37 | ||
| Phishing site | Hybrid-Analysis | 2021-08-13 01:15:16 | 2022-01-04 05:00:07 | ||
| TrojanDropper.Agent | Hybrid-Analysis | 2022-01-03 22:30:08 | 2022-01-03 22:30:08 | ||
| Malware.Generic | Hybrid-Analysis | 2020-06-15 08:15:05 | 2022-01-02 17:00:13 | ||
| W32.Trojan | Hybrid-Analysis | 2021-12-31 11:45:10 | 2021-12-31 11:45:10 | ||
| Gen:Variant.MSILHeracles | Hybrid-Analysis | 2020-12-08 08:00:29 | 2021-12-23 16:01:29 | ||
| Gen:Variant.Zusy | Hybrid-Analysis | 2020-08-14 12:30:05 | 2021-12-19 05:00:25 | ||
| Gen:Variant.Cerbu | Hybrid-Analysis | 2021-07-21 00:45:12 | 2021-12-18 20:15:22 | ||
| Unsafe.AI_Score_99% | Hybrid-Analysis | 2021-12-13 00:45:35 | 2021-12-13 00:45:35 | ||
| GenKryptik.FOLT | Hybrid-Analysis | 2021-12-09 06:00:48 | 2021-12-09 06:00:48 | ||
| Gen:Variant.FakeAlert | Hybrid-Analysis | 2021-12-02 18:47:11 | 2021-12-02 18:47:11 | ||
| Gen:Variant.Tedy | Hybrid-Analysis | 2021-11-29 01:30:18 | 2021-11-29 23:15:07 | ||
| Ransom.C4783349 | Hybrid-Analysis | 2021-11-26 11:30:29 | 2021-11-26 11:30:29 | ||
| Gen:Variant.Ursu | Hybrid-Analysis | 2020-05-07 19:00:22 | 2021-11-25 22:45:06 | ||
| Generic.ASMalwS | Hybrid-Analysis | 2021-07-08 18:15:51 | 2021-11-25 15:30:40 | ||
| MalwareX | Hybrid-Analysis | 2021-11-19 21:45:13 | 2021-11-19 21:45:13 | ||
| Gen:Variant.Dopping | Hybrid-Analysis | 2021-11-15 02:30:40 | 2021-11-15 02:30:40 | ||
| Win64:Trojan | Hybrid-Analysis | 2021-09-12 17:00:38 | 2021-11-12 08:45:10 | ||
| Gen:Backdoor.Heur.Bifrose | Hybrid-Analysis | 2021-10-22 00:15:21 | 2021-11-10 17:15:08 | ||
| HackTool.Binder | Hybrid-Analysis | 2021-07-20 21:45:36 | 2021-11-08 22:15:09 | ||
| Gen:Variant.Barys | Hybrid-Analysis | 2020-12-20 02:15:07 | 2021-10-31 04:15:13 | ||
| Gen:Variant.Ser.Ursu | Hybrid-Analysis | 2021-10-29 13:45:10 | 2021-10-29 13:45:10 | ||
| Gen:Heur.MSIL.Bladabindi | Hybrid-Analysis | 2021-10-27 19:45:18 | 2021-10-27 19:45:18 | ||
| Gen:Variant.MSILPerseus | Hybrid-Analysis | 2021-10-27 19:45:15 | 2021-10-27 19:45:15 | ||
| Suspicious.Save | Hybrid-Analysis | 2021-10-26 01:45:27 | 2021-10-26 01:45:27 | ||
| MSIL:GenMalicious | Hybrid-Analysis | 2021-10-18 00:00:11 | 2021-10-25 20:00:35 | ||
| Virus.NAPWHICH | Hybrid-Analysis | 2021-10-22 08:15:15 | 2021-10-24 01:30:17 | ||
| Backdoor.DarkKomet | Hybrid-Analysis | 2021-02-11 20:30:41 | 2021-10-21 23:15:22 | ||
| ATRAPS.Gen | Hybrid-Analysis | 2021-10-02 08:15:08 | 2021-10-18 21:45:15 | ||
| Ransom.Win64.Wacatac.oa | Hybrid-Analysis | 2021-10-18 03:15:53 | 2021-10-18 03:15:53 | ||
| Gen:Variant.MSIL.Bladabindi | Hybrid-Analysis | 2021-10-11 17:15:52 | 2021-10-18 00:00:08 | ||
| MSIL:NanoCore | Hybrid-Analysis | 2021-10-16 14:45:17 | 2021-10-16 14:45:17 | ||
| PWS.p | Hybrid-Analysis | 2021-03-20 01:45:20 | 2021-10-14 20:15:28 | ||
| TrojanX | Hybrid-Analysis | 2021-10-12 16:30:05 | 2021-10-12 16:30:05 | ||
| Trojan.Win64.Donut | Hybrid-Analysis | 2021-10-11 22:45:21 | 2021-10-11 22:45:21 | ||
| Dropped:Generic.BAT.Miner.A | Hybrid-Analysis | 2021-10-04 21:45:47 | 2021-10-04 21:45:49 | ||
| DeepScan:Generic.Malware.SB2 | Hybrid-Analysis | 2021-10-01 18:45:50 | 2021-10-01 18:45:50 | ||
| Application.Agent | Hybrid-Analysis | 2021-09-30 00:17:12 | 2021-09-30 00:17:12 | ||
| Gen:Heur.Ransom.HiddenTears | Hybrid-Analysis | 2021-09-26 13:17:05 | 2021-09-26 13:17:05 | ||
| Gen:Variant.Sirefef | Hybrid-Analysis | 2021-01-06 13:45:13 | 2021-09-23 22:45:14 | ||
| TrojanSpy.MSIL | Hybrid-Analysis | 2021-09-23 22:45:10 | 2021-09-23 22:45:10 | ||
| Gen:Heur.Ransom.MSIL. | Hybrid-Analysis | 2021-09-20 00:15:46 | 2021-09-20 00:15:46 | ||
| Trojan.PSW.Disco | Hybrid-Analysis | 2021-09-16 11:00:07 | 2021-09-17 16:30:35 | ||
| Ransom.Heur.oa | Hybrid-Analysis | 2021-09-16 16:15:19 | 2021-09-16 16:15:19 | ||
| Spyware.Bobik | Hybrid-Analysis | 2021-09-16 10:15:23 | 2021-09-16 10:15:23 | ||
| Trojan.Win64.Greedy | Hybrid-Analysis | 2021-09-11 15:15:07 | 2021-09-11 15:15:07 | ||
| Gen:Heur.Ransom.MSIL | Hybrid-Analysis | 2021-03-13 21:30:10 | 2021-09-10 14:15:27 | ||
| FileRepMalware | Hybrid-Analysis | 2021-07-14 15:45:52 | 2021-09-03 15:30:28 | ||
| PossibleThreat.PALLASNET | Hybrid-Analysis | 2021-08-13 17:15:19 | 2021-08-13 17:15:19 | ||
| Trojan.MSIL | Hybrid-Analysis | 2021-08-13 16:30:34 | 2021-08-13 16:30:34 | ||
| Spyware.PasswordStealer | Hybrid-Analysis | 2021-07-16 21:17:06 | 2021-08-09 00:16:09 | ||
| Generic.DataStealer.1 | Hybrid-Analysis | 2021-07-29 22:00:08 | 2021-08-01 21:45:05 | ||
| Dropper.Generic.Malware.Sk | Hybrid-Analysis | 2021-07-08 08:15:28 | 2021-08-01 20:30:09 | ||
| Gen:Variant.Johnnie | Hybrid-Analysis | 2021-07-30 07:00:15 | 2021-07-30 07:00:15 | ||
| Gen:Variant.Application.LoadMoney | Hybrid-Analysis | 2021-07-25 08:00:09 | 2021-07-25 08:00:09 | ||
| GenericGB.2B37 | Hybrid-Analysis | 2021-07-24 20:45:05 | 2021-07-24 20:45:05 | ||
| PSW.Stealer | Hybrid-Analysis | 2021-06-26 00:00:32 | 2021-07-24 01:17:09 | ||
| AdwareX | Hybrid-Analysis | 2021-07-19 07:00:43 | 2021-07-19 07:00:43 | ||
| BruteForce.ABL | Hybrid-Analysis | 2021-07-11 06:15:10 | 2021-07-11 06:15:10 | ||
| Wacapew.C | Hybrid-Analysis | 2021-07-10 23:00:04 | 2021-07-10 23:00:04 | ||
| Trojan.Qshell | Hybrid-Analysis | 2021-07-08 02:15:22 | 2021-07-08 02:15:22 | ||
| Trojan.PSW.Python | Hybrid-Analysis | 2020-12-16 04:15:06 | 2021-07-03 13:16:17 | ||
| Dropper.Trojan.Generic | Hybrid-Analysis | 2021-02-15 00:00:28 | 2021-07-03 04:45:30 | ||
| Disstl.c8ff9ed0 | Hybrid-Analysis | 2021-06-30 01:00:09 | 2021-06-30 01:00:09 | ||
| Ransom.Win64.Blocker.oa | Hybrid-Analysis | 2021-06-27 21:46:26 | 2021-06-27 21:46:26 | ||
| Packed.NoobyProtect | Hybrid-Analysis | 2021-06-26 22:45:06 | 2021-06-26 22:45:06 | ||
| Trojan.KeyLogger | Hybrid-Analysis | 2021-06-24 00:00:16 | 2021-06-24 00:00:16 | ||
| Gen:Variant.Midie | Hybrid-Analysis | 2021-04-28 17:00:11 | 2021-06-20 03:17:14 | ||
| AGEN.1110045 | Hybrid-Analysis | 2021-06-19 07:45:17 | 2021-06-19 07:45:17 | ||
| Trojan.PWS.Agent | Hybrid-Analysis | 2021-06-04 22:30:10 | 2021-06-05 17:16:24 | ||
| Java.Trojan | Hybrid-Analysis | 2021-06-01 22:00:12 | 2021-06-01 22:00:12 | ||
| BehavesLike.Win64.HToolLazagne | Hybrid-Analysis | 2021-04-29 12:45:38 | 2021-04-29 12:45:38 |
Tags
agent tesla agentesla agenttesla negasteal malware_download phishing luarmor 44caliber none c2 shortloader venom umbral xworm rat wshrat hworm jenxcus kognito njw0rm dinihou dunihi defense_evasion discovery macos execution trojan persistence ransomware spyware stealer privilege_escalation bootkit adware exploit motw steam upx microsoft crimsonrat darkcomet revengerat warzonerat guest1111 credential_access infostealer rezer0 chat-webhook-exfil facebook-spoof meta-spoof webhook-c2 agilenet emotet guest16 banker impact installer floxif backdoorIP addresses resolved by this hostname
- 162.159.138.232 (2026-07-10 08:03:00)
- 162.159.137.232 (2026-07-10 08:03:00)
- 162.159.128.233 (2026-07-10 08:03:00)
- 162.159.136.232 (2026-07-10 08:03:00)
- 162.159.135.232 (2026-07-10 08:03:00)
Whois information
- AS name
- AS13335 Cloudflare, Inc.
- Domain
- discord.com
- TLD
- com
- DNSSEC
- ['signedDelegation']
- Nameservers
- GABE.NS.CLOUDFLARE.COM, SIMA.NS.CLOUDFLARE.COM, gabe.ns.cloudflare.com, sima.ns.cloudflare.com
- Registrant
- Cloudflare, Inc.
- Address
- DATA REDACTED
- City
- DATA REDACTED
- State
- CA
- Country
- US — United States 🇺🇸
- Contact email
- [email protected], [email protected]
- Domain created
- 2000-11-06 11:45:38
- Domain expires
- 2026-11-06 11:45:37
- First indexed
- 2020-04-27 22:17:00
- Last updated
- 2026-08-16 02:56:46