dofus-touch-mmorpg[.]com
“DOFUS TOUCH - REFLET METARIFIQUE”
Stored observation
Observed title contrast
Evidence Summary
The domain www.dofus-touch-mmorpg.com was registered on March 23, 2026 through Hosting Concepts B.V. d/b/a Registrar.eu and is currently resolved to the IPv4 address 216.198.79.1, which is associated with a US‑based hosting provider identified as Lefkoff Industries. Technical fingerprinting shows the site is served from Vercel infrastructure, employs React for client‑side rendering, and enforces HTTP Strict Transport Security (HSTS). The TLS certificate is issued by Let’s Encrypt (R12) and the site returns HTTP 200 for the root path, confirming an active web service. The page title returned by the server is "DOFUS TOUCH - REFLET METARIFIQUE," matching the reported scam type of a gaming‑related phishing campaign.
Reputation data indicates a Gridinsoft trust score of 0 out of 100 and the domain appears on one security blocklist. It is also listed as blocked by the PhishDestroy service. VirusTotal analysis shows that 3 of 94 scanned security vendors flagged the domain, reinforcing the high‑risk classification. Nameservers ns1.vercel-dns.com and ns2.vercel-dns.com further confirm the Vercel hosting relationship.
While the exact phishing payload has not been publicly disclosed, the combination of a gaming‑oriented page title, low trust score, blocklist presence, and vendor detections suggests a concerted effort to lure victims seeking DOFUS‑related content. Defenders should block the domain at network perimeter, update URL filtering policies, monitor DNS queries for the associated nameservers, and consider adding the IP address 216.198.79.1 to threat‑intel feeds. Continuous re‑evaluation is advised, as additional detections may emerge from broader telemetry sources.
Data Coverage
Threat Response Pipeline
Blocklist coverage
10 monitored external feeds · stored snapshot Aug 11, 2026
10 monitored external feeds No match
Detection timeline
-
Domain status
Reachable → Unreachable
-
Domain status
Unreachable → Reachable
Stored Capture
Domain Intelligence
Technical detailsDNS, TLS names and timestamps
ICANN OVERSIGHT
Accreditation and RAA context
Accreditation and RAA context
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
VirusTotal Analysis
Were You Affected by This Site?
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive