Skip to content

🛡️ 3-Layer Anti-Scam Security AI

Lupin includes an enterprise-grade, multi-tier threat detection pipeline designed to eliminate Discord Nitro scams, phishing links, social engineering attacks, and prompt injection before server members can fall victim.


🔍 How the 3-Layer Scanner Works

[Incoming or Edited Message]


[Layer 1: Blacklist & Typosquats] ───► Flagged ──► [Instant Delete & Strike]
           │ (Pass)

[Layer 2: VirusTotal API] ───────────► Flagged ──► [Instant Delete & Strike]
           │ (Pass)

[Layer 3: Security AI Service] ──► Flagged ──► [Instant Delete & Strike]
           │ (Pass)

[Message Allowed]

Layer 1: In-Memory Blacklist & Typosquat Regex

  • Compares incoming domains against 37,500+ known nitro scam domains (synced from global threat intelligence blacklist and updated automatically every 6 hours).
  • Uses regex to identify common typosquat domains (e.g., dlscord-app.com, steamcommunlty.com, discorcl.gift).
  • Speed: < 1 ms instant evaluation in RAM.

Layer 2: VirusTotal Domain Reputation API

  • Inspects URLs against the global VirusTotal malware database.
  • Caches scanned results for 24 hours to preserve API quotas.

Layer 3: Dedicated Security AI Service

  • Powered by our dedicated Security AI Service (Security-Guard-V1) to evaluate natural language context and intent.
  • Detects sophisticated attacks such as:
    • Phishing & Scams: Fake Nitro, Steam gifts, crypto giveaways.
    • Social Engineering: Impersonating staff/admins, demanding account credentials or tokens.
    • Prompt Injection / Jailbreak: Bypassing bot roles or attempting to leak system prompts.
    • Malicious Spam: Shortener floods and deceptive advertising.

⚖️ Graduated Punishment Rules

When a user triggers the threat detection pipeline, Lupin applies progressive penalties:

Strike LevelAction TakenDetails
Strike 1 & 2🗑️ Delete & WarnDeletes the message, sends a temporary 10-second warning in chat, and sends a DM alert with security recommendations.
Strike 3 & 4Delete & 24h TimeoutDeletes the message, places the member in a 24-Hour Timeout, and alerts the channel and DM.
Strike 5+🚫 Delete & Permanent BanDeletes the message, permanently Bans the user, and purges their recent 24-hour message history.

Strike Expiration

Strikes automatically expire and reset after 7 days of good standing.


💻 Anti-Scam Commands

CommandDescriptionPermission
/antiscam statusView the live operational status of all 3 security layersManage Server
/antiscam test <message>Test a suspicious message or URL against the scannerManage Server
/antiscam strikes <user>View active strike count and penalty history for a memberModerate Members
/antiscam reset <user>Reset a member's strikes back to 0Ban Members