club-dota[.]com

Analysis of club-dota.com indicates active malicious infrastructure targeting users with a generic phishing campaign. The domain resolves to the IPv4 address 5.175.218.201, which is geolocated to the Netherlands and associated with No ACK Group Holding AB. Registration details list Fewmoretaps OU d/b/a Trustname.com as the registrar, and the site is protected by a Let’s Encrypt certificate identified as YE2. HTTP responses return a 301 redirect, and the page title reported by crawlers is "Just a moment...". DNS resolution is handled by Cloudflare nameservers alice.ns.cloudflare.com and terry.ns.cloudflare.com, suggesting the use of Cloudflare’s CDN and DDoS mitigation services. The domain is currently flagged by PhishDestroy and appears on a single external blocklist. VirusTotal scans show four of ninety‑one security vendors flagging the domain, reinforcing the suspicion of malicious intent. While the exact phishing payload or target brand has not been disclosed, the combination of a generic page title, redirection behavior, and active blocklist listings confirms the site’s role in credential harvesting. Defenders should block the domain at network perimeters, update URL filtering policies, and monitor outbound connections to the associated IP. Incident response teams are advised to quarantine any credentials suspected of being submitted to this site and to inform affected users of potential compromise.