wchallengers[.]net

Analysis of wchallengers.net indicates confirmed brand impersonation targeting Celer, a known entity in the blockchain and gaming sectors. The domain, registered on November 12, 2025, through PDR Ltd. d/b/a PublicDomainRegistry.com, was taken offline by July 22, 2026, following detection by at least one security blocklist (PhishDestroy). Infrastructure analysis reveals the domain resolved to 104.21.22.41, hosted on Cloudflare's network (AS13335, US), a common pattern for phishing sites leveraging CDN services to obscure origin servers. Nameservers emerson.ns.cloudflare.com and mallory.ns.cloudflare.com further confirm Cloudflare's involvement in the domain's DNS resolution.

No SSL certificate was present, increasing the likelihood of interception or man-in-the-middle risks for visitors. The page title, 'Global | eSports and Gaming Community,' suggests an attempt to align with Celer's branding or related gaming/esports themes, though the exact content and phishing mechanics remain unanalyzed. Gridinsoft assigned a trust score of 0/100, reinforcing its classification as malicious. While 95 vendors scanned the domain on VirusTotal, none currently flag it—this absence of detections does not confirm safety but may reflect delayed or incomplete coverage.

Defenders should treat this domain as high-risk for Celer-related phishing, particularly given its prior blocklist inclusion and offline status. Monitor for re-registration or shifts in hosting, as Cloudflare's infrastructure is frequently reused for new campaigns. If historical traffic or logs exist, review for connections to 104.21.22.41 or the domain itself, prioritizing endpoints that interacted with it during its active period. No further brand-specific indicators (e.g., payment pages, credential harvesters) are confirmed at this time.