Is discord.com legit?
Discord.com appears to be a trusted and well-established online platform. The primary concern is the high number of external scripts, which could pose a security or privacy risk, but otherwise, the site demonstrates strong security measures and transparency.
Social Media average: 80/100 · based on 38 sites
Checked: April 21, 2026 at 9:37 AM UTC
Is discord.com a scam? Here's what we found.
Security is generally strong with TLS 1.3, HSTS, CSP, and clickjacking protection in place, along with a clean Google Web Risk report. The excessive number of external scripts, however, presents a minor concern.
The domain has a long history, dating back over 25 years, and clear registration details through a reputable registrar, indicating a stable and established entity.
The site has an excellent global Tranco rank, a long web archive history, and is clean on DNS blacklists, confirming its standing as a widely recognized and reputable service. The absence of a Trustpilot profile is a minor neutral point.
Discord provides contact information, legal pages like Privacy & Terms, and maintains a strong social media presence, showcasing good transparency. The lack of a sitemap is a small omission for such a large site.
With comprehensive privacy and terms of service pages, the site demonstrates a solid commitment to compliance and user understanding of policies.
The site benefits from a robust infrastructure, including 5 IP addresses, strong email authentication (SPF, DMARC), DNSSEC, and Cloudflare as the DNS provider, ensuring reliability and security.
Signals Detected
This is one of the most visited websites globally
Site uses structured data identifying itself as: WebSite, Organization
This business has no Trustpilot presence — not unusual for smaller or newer companies
Excessive number of external scripts — may indicate malicious injection
Valid certificate, expires in 42 days
Certificate issued by Google Trust Services
Connection uses TLS 1.3
crt.sh returned status 502
Resolves to: 162.159.138.232, 162.159.137.232, 162.159.135.232, 162.159.136.232, 162.159.128.233
Mail servers: aspmx.l.google.com., alt2.aspmx.l.google.com., alt1.aspmx.l.google.com., aspmx3.googlemail.com., aspmx2.googlemail.com.
Domain has SPF email authentication configured
Domain has DMARC email authentication configured
DNS providers: gabe.ns.cloudflare.com., sima.ns.cloudflare.com.
Domain created 2000-11-06T11:45:38Z (25 years, 9 months ago)
Registered through Cloudflare, Inc.
Expires in 199 days
DNSSEC status from WHOIS
robots.txt has 64 directives
Site enforces HTTPS via HSTS
Site has Content Security Policy configured
X-Frame-Options: DENY
Web server: cloudflare
No threats detected by Google Web Risk
Not found on any DNS blacklists
Site has custom branding and social media metadata
Website is live and responding
Website appears to have contact information
Website has both privacy policy and terms of service pages
Website links to multiple social media platforms
No sitemap found — common for smaller sites
Earliest archive snapshot from 19961222
Fast page load
Stay Safe Online
Good habits to protect yourself, no matter the scan result.
Never reuse passwords across sites.
Add a second layer of security to your accounts.
Always verify unfamiliar stores before entering payment info.