Compromised accounts, caught before the second message

＋ Invite → How it works

Midnight Arcade

Text channels

#announcements

#general

#clips-and-wins

#lfg

Staff

#mod-log

#general

rileyToday at 10:58 PM

anyone up for ranked? need one more

cool_gamerToday at 11:02 PM

@everyone FREE NITRO first come first serve 🎁 discord-give.com/claim

Aegis ✓ APPToday at 11:02 PM

Likely compromised account — contained

[scam-link] known phishing domain +100
[cross-channel] same content in 5 channels +75
[behavior-shift] dormant 47 days → link blast +25

purged

roles stripped

quarantined

recovery DM sent

2-year member — quarantined for recovery, not banned.

Message #general

It knows your members

Aegis learns what normal looks like for everyone — posting rhythm, favorite channels, link habits. A two-year regular suddenly spraying links into channels they've never touched isn't a mood. It's a stolen token, and it lights up instantly.

Behavioral Baselines Pressure Scoring Cross-Channel Radar Velocity Repetition +3

cool_gamerToday at 11:02 PM

FREE NITRO first come first serve 🎁 discord-give.com/claim
FREE NITRO first come first serve 🎁 discord-give.com/claim
FREE NITRO first come first serve 🎁 discord-give.com/claim

AegisToday at 11:02 PM

cool_gamer has been quarantined
→ REASON: Behavior shift — dormant 47 days, first-ever links, 5 channels in 9 seconds

Scam links don't stand a chance

Three layers deep: 44,000+ confirmed phishing domains refreshed hourly, lookalike unmasking that reads dіѕсоrd-n1tro as discord-nitro, and the "free nitro" playbook every campaign follows — so brand-new scam domains get caught in their first hours.

Live Blocklists Homoglyph Folding Lure Phrases IP-Grabber Watch Invite Spam +2

kaylaToday at 8:14 PM

yo scan this QR for a free month of nitro dіѕсоrd-gifts.net 🎁

AegisToday at 8:14 PM

1 message removed
→ REASON: Lookalike domain — "dіѕсоrd-gifts.net" folds to "discord-gifts.net", matches nitro-scam pattern

Raids bounce off the door

A join spike flips raid mode automatically: invites and DMs pause through Discord's own security actions, day-old accounts wait at the door, and every detector runs hot until the wave passes. Even a hijacked moderator gets caught by the audit-log watch.

Join-Rate Radar Auto Pause Invites Door Timeout Staff Watch Anti-Nuke Alarm

AegisToday at 2:47 AM

Raid mode activated
→ TRIGGER: 23 joins in 60s (19 accounts < 7 days old)
Invites paused · DMs paused · young accounts held at the door for 10 min

AegisToday at 2:58 AM

Raid over. 0 messages got through. Invites re-enabled.

Punish the attacker, not the victim

A day-old throwaway gets banned and wiped in one call. Your friend of two years gets contained and rescued — spam purged, roles stripped, and a DM with the real fix: a password reset that kills the stolen token, then 2FA. When they're secured, /aegis release brings them home.

Quarantine Server-Wide Purge Recovery DM Mod-Log Trail /aegis release

Aegis✓ APPToday at 11:03 PM

Your account looks compromised. It posted messages in Midnight Arcade matching known scam campaigns, so it's temporarily quarantined there.

1. Change your Discord password now — this kills the attacker's stolen token
2. Turn on two-factor auth
3. De-authorize unknown apps · run a malware scan
4. Locked out? → dis.gd/contact

Your server has people worth protecting.

Free · two-minute setup · quarantines attackers, rescues friends