Scam links and invites

Invite protection controls invites to other servers. Invites to this server (including its vanity URL) always pass while "Allow own server invites" is on; invites to the servers on the allowed list pass too. Every other invite is handled by the foreign invite action once the module is enabled. Invite links are recognised in message text, embeds, forwarded messages, polls and link buttons, including invites posted inside code blocks.

Add the IDs of partner servers whose invites may be posted here (up to 50). Defendr resolves each invite to find the server it leads to; an invite that cannot be resolved (expired, invalid or a temporary Discord problem) counts as foreign unless it is this server's vanity URL.

Some servers exist only to run scams. Invites to servers on Defendr's reviewed list are blocked by the scam server action even when invite protection is off, as long as link protection is on. Server moderators can mark a match as a false positive from the case card.

Every message, edit, forward, embed, poll and link button is checked for links on Defendr's reviewed threat list, on threat feeds and on this server's own block list. Discord login links (discord.com/ra/…) are always flagged. What happens on a hit is set per detection type on the Actions page; Recommended deletes reviewed and threat-feed links.

Each detection type has its own action: log only, delete, or delete plus a timeout, kick or ban. Actions are capped by the confidence of the detection, so a heuristic such as scam wording can never ban anyone. The Security Score expects reviewed and threat-feed links to at least be deleted.

The block list holds domains and link prefixes this server never wants to see; entries match as the whole domain, a host name or a link prefix. Well-known sites and shared platforms such as github.com cannot be blocked as a whole, but a specific link prefix on them can. The allow list stops threat feeds from matching a domain; reviewed exact links still match. Test a URL shows how a link is judged with these lists.

/check link: tells you whether a link is on a known threat list. It works everywhere, also in DMs, and never stores the link. Moderators see a Why? button with the matched entry and its sources. Paste an invite (a discord.gg link or a code) into the same option and it resolves the invite and tells you whether it leads to a reviewed scam server; it never reveals whether Defendr is in that server.

A message that combines a link with typical scam phrases such as free nitro, airdrop or i accidentally reported you is flagged as scam wording. It is a weak signal: Recommended only logs it, and it never fires for links to well-known first-party sites.