dofus-touch-mmorpg[.]com

The domain www.dofus-touch-mmorpg.com was registered on March 23, 2026 through Hosting Concepts B.V. d/b/a Registrar.eu and is currently resolved to the IPv4 address 216.198.79.1, which is associated with a US‑based hosting provider identified as Lefkoff Industries. Technical fingerprinting shows the site is served from Vercel infrastructure, employs React for client‑side rendering, and enforces HTTP Strict Transport Security (HSTS). The TLS certificate is issued by Let’s Encrypt (R12) and the site returns HTTP 200 for the root path, confirming an active web service. The page title returned by the server is "DOFUS TOUCH - REFLET METARIFIQUE," matching the reported scam type of a gaming‑related phishing campaign.

Reputation data indicates a Gridinsoft trust score of 0 out of 100 and the domain appears on one security blocklist. It is also listed as blocked by the PhishDestroy service. VirusTotal analysis shows that 3 of 94 scanned security vendors flagged the domain, reinforcing the high‑risk classification. Nameservers ns1.vercel-dns.com and ns2.vercel-dns.com further confirm the Vercel hosting relationship.

While the exact phishing payload has not been publicly disclosed, the combination of a gaming‑oriented page title, low trust score, blocklist presence, and vendor detections suggests a concerted effort to lure victims seeking DOFUS‑related content. Defenders should block the domain at network perimeter, update URL filtering policies, monitor DNS queries for the associated nameservers, and consider adding the IP address 216.198.79.1 to threat‑intel feeds. Continuous re‑evaluation is advised, as additional detections may emerge from broader telemetry sources.