🛡️ 3-Layer Anti-Scam Security AI
Lupin includes an enterprise-grade, multi-tier threat detection pipeline designed to eliminate Discord Nitro scams, phishing links, social engineering attacks, and prompt injection before server members can fall victim.
🔍 How the 3-Layer Scanner Works
[Incoming or Edited Message]
│
▼
[Layer 1: Blacklist & Typosquats] ───► Flagged ──► [Instant Delete & Strike]
│ (Pass)
▼
[Layer 2: VirusTotal API] ───────────► Flagged ──► [Instant Delete & Strike]
│ (Pass)
▼
[Layer 3: Security AI Service] ──► Flagged ──► [Instant Delete & Strike]
│ (Pass)
▼
[Message Allowed]Layer 1: In-Memory Blacklist & Typosquat Regex
- Compares incoming domains against 37,500+ known nitro scam domains (synced from global threat intelligence blacklist and updated automatically every 6 hours).
- Uses regex to identify common typosquat domains (e.g.,
dlscord-app.com,steamcommunlty.com,discorcl.gift). - Speed:
< 1 msinstant evaluation in RAM.
Layer 2: VirusTotal Domain Reputation API
- Inspects URLs against the global VirusTotal malware database.
- Caches scanned results for 24 hours to preserve API quotas.
Layer 3: Dedicated Security AI Service
- Powered by our dedicated Security AI Service (
Security-Guard-V1) to evaluate natural language context and intent. - Detects sophisticated attacks such as:
- Phishing & Scams: Fake Nitro, Steam gifts, crypto giveaways.
- Social Engineering: Impersonating staff/admins, demanding account credentials or tokens.
- Prompt Injection / Jailbreak: Bypassing bot roles or attempting to leak system prompts.
- Malicious Spam: Shortener floods and deceptive advertising.
⚖️ Graduated Punishment Rules
When a user triggers the threat detection pipeline, Lupin applies progressive penalties:
| Strike Level | Action Taken | Details |
|---|---|---|
| Strike 1 & 2 | 🗑️ Delete & Warn | Deletes the message, sends a temporary 10-second warning in chat, and sends a DM alert with security recommendations. |
| Strike 3 & 4 | ⏳ Delete & 24h Timeout | Deletes the message, places the member in a 24-Hour Timeout, and alerts the channel and DM. |
| Strike 5+ | 🚫 Delete & Permanent Ban | Deletes the message, permanently Bans the user, and purges their recent 24-hour message history. |
Strike Expiration
Strikes automatically expire and reset after 7 days of good standing.
💻 Anti-Scam Commands
| Command | Description | Permission |
|---|---|---|
/antiscam status | View the live operational status of all 3 security layers | Manage Server |
/antiscam test <message> | Test a suspicious message or URL against the scanner | Manage Server |
/antiscam strikes <user> | View active strike count and penalty history for a member | Moderate Members |
/antiscam reset <user> | Reset a member's strikes back to 0 | Ban Members |
