censorbot[.]club

The domain censorbot.club is identified as a brand impersonation threat specifically targeting Discord, a widely used communication platform. Analysis indicates the domain is currently offline, though prior activity suggests malicious intent to deceive users by mimicking legitimate Discord-related services, such as bots or integrations. The threat type is classified as brand impersonation, a tactic commonly employed to exploit user trust in recognized brands for fraudulent purposes. Infrastructure analysis reveals the domain was registered through Global Domain Group LLC on February 21, 2026, an unusually future-dated creation that may indicate an attempt to evade detection or scrutiny. It resolves to the IP address 188.114.97.3, a Cloudflare-hosted endpoint leveraging HTTP/3 and secured with a Google Trust Services SSL certificate. Security vendors have flagged the domain, with 4 out of 95 VirusTotal engines detecting it as malicious. Additionally, the domain appears on two security blocklists and has been assigned a trust score of 0/100 by Gridinsoft. The page title, 'Censor Bot,' aligns with Discord bot impersonation, a common vector for credential theft or malware distribution. Current status indicates the domain has been taken offline, likely due to detection and mitigation efforts. However, the infrastructure and registration details suggest potential for re-emergence under similar or altered domains. Users and organizations are advised to block the domain and its associated IP address (188.114.97.3) at the network level. Security teams should monitor for related domains registered through the same registrar or resolving to identical infrastructure. End-users should verify the authenticity of Discord-related services by cross-referencing official sources and avoiding interaction with unsolicited or untrusted links.