Discord bot tokens

• trufflehog 3.97.4
• Twin source three base64url segments: 24|26 . 6 . 27|38 · observed 2026-09-24 · Un-probeable record lifted 2026-09-24 (#207): twins mutate only segment widths no issued shape has (segment 3 of 37, segment 1 of 25), the dot delimiter, and a byte outside the base64url alphabet. The widths rest on community and dated empirical reports plus TruffleHog's 24/6/27 rule, never on Discord documentation, so every twin stays T2.

Discord's own single documented example matches the legacy 24/6/27 shape exactly, corroborated by TruffleHog's discordbottoken detector (its \b-anchored regex matches only that exact width). Re-checked 2026-09-22 (redact-secret#646, redact-secret-benchmarks#159): no pinned scanner or Discord-owned page documents the current 24/6/38 or 26/6/38 shapes; the body-length change is corroborated only by third-party tool regexes and dated empirical reports (see redact-secret#646's broad-discovery and web-search passes), never by either pinned scanner, so it stays prose-only, not a `corroboration` entry. Gitleaks's discord-api-token and discord-client-secret rules target different, unrelated Discord credential shapes and are not cited.