Skip to main content
Open Protection → Phishing links. Choose the channels to check, start with Monitor, and review its matches before choosing Take action. Off stops new checks.

What pup checks

pup compares links with known malicious hosts and your server’s blocked hosts. It refreshes the public PhishDestroy feed and its allowlist every hour, and checks messages again when they are edited. Bare domains and links without a scheme, such as example.com/login, are checked against known malicious hosts without opening the destination. Full HTTP(S) URLs and masked links also receive destination checks, following at most three redirects. Private network addresses are not opened. A failed lookup creates no phishing incident.

Choose a response

For Take action, configure the response and notifications, then save. Protection responses covers the available actions, scopes and exemptions. Open a recent match to see what pup detected and whether its response succeeded. An authorized reviewer can mark a false positive as recovered. This keeps the finding and cancels pending pup actions; it cannot recreate a deleted message or undo an administrator’s Discord changes.