Abstract

Phishing attacks through digital communication platforms such as Discord have increasingly become a cybersecurity threat, often leading to the loss of user credentials and personal data. This study aims to investigate and analyze digital artifacts from phishing attacks occurring via Discord Web. The research employs the National Institute of Standards and Technology (NIST) digital forensic framework, comprising four main stages: Collection, Examination, Analysis, and Reporting. An experimental approach was conducted simulating a closed-environment attack between an attacker and a victim. The digital investigation process utilized Wireshark for network traffic capture, FTK Imager for local host artifact acquisition, DB Browser for SQLite for browser history analysis, and WHOIS for open-source threat intelligence. The results indicate that the NIST framework effectively supports a systematic investigation, yielding accurate digital evidence. Successfully extracted data includes modified local DNS configurations, unencrypted HTTP plaintext credentials, phishing URL visit timestamps, and malicious domain registration profiles. This research contributes to the development of digital forensic handling strategies for social engineering and Insider Threat incidents on modern communication platforms.

References

• K. Gupta, C. Varol, And B. Zhou, “Digital Forensic Analysis Of Discord On Google Chrome,” Forensic Science International: Digital Investigation, Vol. 44, P. 301479, 2023, Doi: Https://Doi.Org/10.1016/J.Fsidi.2022.301479.
• K. Gupta, P. Lanka, And C. Varol, “A Holistic Digital Forensic Analysis Of Discord – Storage, Memory, And Network Perspectives,” J. Forensic Sci., Vol. 69, No. 4, Pp. 1320–1333, 2024, Doi: Https://Doi.Org/10.1111/1556-4029.15548.
• F. Dzil Ikram And M. Koprawi, “Forensic Analysis On Discord Application Using The National Institute Of Standards And Technology (Nist) Method,” 2023. [Online]. Available: Www.Ejournal.Isha.Or.Id/Index.Php/Mandiri
• M. Davis, B. Mcinnes, And I. Ahmed, “Forensic Investigation Of Instant Messaging Services On Linux Os: Discord And Slack As Case Studies,” Forensic Science International: Digital Investigation, Vol. 42, P. 301401, 2022, Doi: Https://Doi.Org/10.1016/J.Fsidi.2022.301401.
• F. S. Marthinsen, “Creating A Framework For Live Data Analysis Of Discord Servers.”
• K. Maitra, “Digital Forensic Analysis Of Social Media Platforms For Enhanced Investigation And Evidence Collection,” 2024. [Online]. Available: Http://Www.Ijias.Issr-Journals.Org/
• I. Riadi, A. Yudhana, And G. Fanani, “Mobile Forensic On Michat Messenger Services Using Idfif V2 Framework,” May 2024, P. 90003. Doi: 10.1063/5.0249092.
• T. Nargis, P. S. Monteiro, And S. U. Shenoy, “Malicious File Detection Using Discord Bot,” Aip Conf. Proc., Vol. 3278, No. 1, P. 20005, May 2025, Doi: 10.1063/5.0262194.
• J. M. Puaschunder And H. Nicoleta-Elena, Scientia Moralitas Conference Proceedings Editors: Fifth Edition. 2025.
• N. Lykousas, V. Koutsokostas, F. Casino, And C. Patsakis, “The Cynicism Of Modern Cybercrime: Automating The Analysis Of Surface Web Marketplaces,” In 2023 Ieee International Conference On Service-Oriented System Engineering (Sose), 2023, Pp. 161–171. Doi: 10.1109/Sose58276.2023.00027.
• A. K. Tyagi, K. Naithani, And S. Tiwari, “Security And Possible Threats In Today’s Online Social Networking Platforms,” In Online Social Networks In Business Frameworks, John Wiley & Sons, Ltd, 2024, Ch. 8, Pp. 159–199. Doi: Https://Doi.Org/10.1002/9781394231126.Ch8.
• R. Waterval, “How Information Sharing On Online Social Networks May Allow For Personalized Cyberattacks,” 2021.
• K. Gupta, D. Oladimeji, C. Varol, A. Rasheed, And N. Shahshidhar, “A Comprehensive Survey On Artifact Recovery From Social Media Platforms: Approaches And Future Research Directions,” Dec. 01, 2023, Multidisciplinary Digital Publishing Institute (Mdpi). Doi: 10.3390/Info14120629.
• S. L. Schröer, N. Canevascini, I. Pekaric, P. Widmer, And P. Laskov, “The Dark Side Of The Web: Towards Understanding Various Data Sources In Cyber Threat Intelligence,” Apr. 2025, [Online]. Available: Http://Arxiv.Org/Abs/2504.14235
• R. Hidayat And N. Anwar, “Forensic Analysis Of Web Phishing And Social Engineering Using The National Institute Of Standards And Technology Method Case Study Of Facebook Account Data Theft,” Journal Of Digital Security And Forensics, Vol. 1, No. 1, Jul. 2024, Doi: 10.29121/Digisecforensics.V1.I1.2024.14.
• Y. Gong And U. Karabiyik, “Forensics Analysis Of Android Social Networking Application: Tencent Qq Revisited,” In 2024 International Symposium On Networks, Computers And Communications (Isncc), 2024, Pp. 1–8. Doi: 10.1109/Isncc62547.2024.10758981.
• R. Hanaputra, K. Sa’adah, And R. Purwoko, “Identifikasi Digital Evidence Dalam Transaction Fraud Pada Whatsapp Desktop Berdasarkan Nist Sp 800-86: Studi Kasus Bisnis Properti,” Jurnal Fasilkom, Vol. 14, Pp. 332–338, Jun. 2024, Doi: 10.37859/Jf.V14i2.7100.
• F. E. Salamh, M. M. Mirza, S. Hutchinson, Y. H. Yoon, And U. Karabiyik, “What’s On The Horizon? An In-Depth Forensic Analysis Of Android And Ios Applications,” Ieee Access, Vol. 9, Pp. 99421–99454, 2021, Doi: 10.1109/Access.2021.3095562.
• T. Rochmadi, A. Fadlil, I. Riadi, K. Panilestari, And Y. Wicaksono, “Analisis Teknologi Dan Prosedural Dalam Penanganan Insiden Untuk Mendukung Forensik Digital,” Jati (Jurnal Mahasiswa Teknik Informatika), Vol. 10, Pp. 3285–3293, May 2026, Doi: 10.36040/Jati.V10i2.17792.
• R. Chand, N. Sharma, And A. Kabir, “Advancing Web Browser Forensics: Critical Evaluation Of Emerging Tools And Techniques,” Sn Comput. Sci., Vol. 6, Jun. 2025, Doi: 10.1007/S42979-025-03921-6.
• M. Syukri, I. Riadi, And T. Sutikno, “Analisis Forensik Keamanan Data Pribadi Pada Mode Privasi Browser Menggunakan Metode National Institute Of Standards And Technology (Nist),” Jurnal Processor, Vol. 20, May 2025, Doi: 10.33998/Processor.2025.20.1.2012.
• O. Iskandar And Others, “Analisis Kejahatan Online Phishing Pada Masyarakat,” Myrepublik Research And Publishing Journal, 2024.
• A. Chowdhury And A. Dwivedi, “A Comprehensive Review Of Phishing In Cybersecurity: Risks, Impacts, And Defence Strategies,” Interantional Journal Of Scientific Research In Engineering And Management, Vol. 08, Pp. 1–7, Jun. 2024, Doi: 10.55041/Ijsrem38040.
• N. Nuratikah, S. Sunardi, And I. Riadi, “Investigasi Forensik Digital Kasus Pelecehan Seksual Pada Layanan Media Sosial X Dengan Metode Acpo,” Jati (Jurnal Mahasiswa Teknik Informatika), Vol. 10, Pp. 2220–2228, May 2026, Doi: 10.36040/Jati.V10i2.17293.
• T. Rochmadi, A. Fadlil, And I. Riadi, “Tinjauan Pustaka Sistematis: Tantangan Dan Faktor-Faktor Pengembangan Kesiapan Forensik Digital,” Cyber Security Dan Forensik Digital, Vol. 7, Pp. 81–89, May 2024, Doi: 10.14421/Csecurity.2024.7.2.4861.
• S. Szymoniak And K. Foks, “Open Source Intelligence Opportunities And Challenges: A Review,” Advances In Science And Technology Research Journal, Vol. 18, Pp. 123–139, Jun. 2024, Doi: 10.12913/22998624/186036.