guildscan[.]net

The domain guildscan.net is a generic phishing site designed to deceive users into disclosing sensitive information such as login credentials or personal data. It does not impersonate a specific brand or utilize a known drainer kit. As of the latest verification, guildscan.net has been taken offline, reducing immediate risk to users.

Technical analysis reveals that guildscan.net was flagged by 2 of 95 security vendors on VirusTotal, including Gridinsoft and SOCRadar, while Google Safe Browsing did not detect it. The domain was registered through NameCheap, Inc. on February 21, 2026, and resolved to the IP address 188.114.96.3, hosted by Cloudflare in the US. It appears on 3 security blocklists, including PhishDestroy, MetaMask, and SEAL. The SSL certificate was issued by Google Trust Services / WE1, and the observed page title mimicked Discord with 'Discord - Group Chat That’s All Fun & Games'. Technologies detected include Cloudflare and HTTP/3, and the site returned an HTTP 523 status before going offline.

Users who may have interacted with guildscan.net should immediately change any exposed credentials, particularly for accounts accessed during the suspected phishing attempt. Enable two-factor authentication (2FA) on all critical accounts to mitigate further risk. Monitor financial and communication platforms for unauthorized activity. Report the domain to relevant authorities, such as the Anti-Phishing Working Group (APWG) or local cybercrime units, and consider submitting the URL to additional blocklists like PhishTank to prevent future abuse.