pokerhotties[.]org

pokerhotties.org was observed on a security blocklist and is currently flagged by PhishDestroy as an active generic phishing site. The domain resolves to the authoritative name servers ns1.dyna-ns.net and ns2.dyna-ns.net, both associated with Dynadot Inc, a registrar known for rapid domain provisioning. HTTP requests to the root URL return a 301 redirect, indicating the operator is controlling the response flow. VirusTotal scans have identified the domain as malicious in 3 out of 91 vendor engines, reinforcing the blocklist assessment.

No additional infrastructure details such as IP address, autonomous system number, or hosting provider have been disclosed in the available intelligence, limiting deeper network attribution. The lack of a public page title or explicit brand target prevents confirmation of the exact credential‑harvesting payload, but the classification as generic phishing suggests the site is likely used to solicit login credentials or personal data. Defenders should add pokerhotties.org to network‑level deny lists, enforce DNS filtering, and monitor outbound connections for any attempted HTTP(S) requests to the domain.

Continuous re‑scanning on VirusTotal and periodic verification against emerging blocklists are recommended to capture any changes in detection coverage. Organizations employing email security gateways should treat any messages containing this domain as malicious and quarantine them. Incident response teams should collect any client‑side artifacts that reference pokerhotties.org for forensic correlation, noting the redirect behavior and the involvement of Dynadot‑hosted name servers as potential indicators of compromise.