dofuspourlesnooobs[.]fr

PhishDestroy identifies an active phishing site hosted at dofuspourlesnooobs.fr designed to mimic the 'Quête AbrakenMou' game mechanic, a known target for credential and asset theft within gaming communities.

This domain operates as a generic phishing page with no direct brand impersonation beyond the in-game quest reference. The threat leverages deceptive social engineering to trick users into submitting sensitive account credentials or cryptocurrency wallet access. Technical indicators include a Let’s Encrypt SSL certificate, a VirusTotal detection rate of 7 out of 95 security vendors, and resolution to IP 176.123.0.55. The domain was registered on March 05, 2026, through Hosting Concepts B.V. d/b/a Openprovider, and is currently flagged by one security blocklist and in Google Safe Browsing (GSB).

This phishing campaign is actively distributing malicious content with elevated risk potential, as evidenced by multiple AV detections and blocklist presence. Immediate mitigation is recommended: users should avoid accessing the domain, enterprises should block it at DNS and firewall levels, and security teams should monitor for related IOCs. While remediation efforts are ongoing, the risk remains elevated due to the fresh registration and active distribution vector. Full forensic analysis and IOCs are available in the threat report.