Link Protection

Block Discord invites, phishing links, URL shorteners, adult sites, and custom domains.

5 min readUpdated Sep 1, 2026

Link Protection blocks unwanted and unsafe domains. Enable only the filters your server needs, then allowlist trusted domains that create false positives.

Configure from the DashboardReview the enabled filters and domain lists together.
  1. Open Dashboard → Moderator → Autopilot → Anti-Link.
  2. Enable the protection.
  3. Turn on the required link categories.
  4. Add custom blocked or allowed domains.
  5. Add trusted exceptions only when needed.
  6. Save and test with harmless URLs.

[Insert screenshot here]

Link protection in Dashboard → Moderator → Autopilot

Configure with /autopilot antilinkUse the interactive panel for filters, domains, exceptions, and punishments.
  1. Run /autopilot antilink.
  2. Select Enable.
  3. In Config, use Enable or Disable beside each link category. Changes save immediately.
  4. Manage Blocked Domains and Allowed Domains with the Add/Remove dialogs.
  5. Review Punishments and use Whitelist → Manage to choose ignored members, roles, or channels.

[Insert screenshot here]

The enabled Anti-Link panel

  • Discord Invites: blocks discord.gg, discord.com/invite, and discordapp.com/invite links.
  • Phishing Links: blocks domains found in Discortics phishing data.
  • Short Links: blocks known URL shorteners.
  • NSFW Links: blocks known adult domains.

Custom blacklist

Select Add, then send comma-separated domains such as example.com. Do not include paths. Discortics removes http://, https://, www., and paths when the domain is saved.

Custom allowlist

An allowlisted domain bypasses local link classification and the Discord invite or custom blacklist rules. Keep this list limited to domains you trust.

The allowlist overrides the blacklist.

Exceptions

Ignored users, roles, and channels bypass Link Protection.

What happens to a blocked message

Discortics deletes locally detected phishing, short, adult, and custom-blacklisted links. Discord AutoMod blocks configured invites and custom blacklist keywords before posting where supported.

The configured punishment policy runs after detection. The first action may be any punishment; every next action must be unique and strictly stronger. Mute and Timeout are alternatives at the same level, and Ban is the maximum punishment. Start with Warn while checking for false positives.

List coverage

Phishing, adult-domain and shortener detection uses locally installed lists. Each bot process loads compact domain hashes once and shares them across its worker threads; matching a URL uses an in-memory lookup rather than a Redis request. The operator can refresh these from public feeds without a paid per-message API. Updates take effect after bot workers reload; an unknown domain is not a guarantee of safety. Custom domain blocking and Discord invite blocking remain independent of those feeds.