activisionvip[.]top

This domain is flagged as a high-risk credential harvesting phishing site targeting users of the Call of Duty gaming platform. Analysis indicates the domain is designed to mimic the official login interface of Call of Duty, as evidenced by the page title 'LOGIN - CALL OF DUTY®,' with the intent to deceive users into submitting their account credentials. The threat type is classified as generic phishing with a focus on credential theft, a common tactic in gaming-related fraud to gain unauthorized access to accounts for financial exploitation or resale. Infrastructure analysis reveals the domain activisionvip.top was registered on June 10, 2024, through the registrar Spaceship, Inc. It currently resolves to the IP address 31.59.93.73, which may be part of a broader malicious infrastructure. Detection metrics from VirusTotal show 18 out of 95 security vendors have flagged this domain as malicious, indicating moderate to high confidence in its fraudulent nature. The domain has also been documented in one threat intelligence pulse on AlienVault OTX, further corroborating its association with phishing activity. No legitimate ties to the Call of Duty brand or its parent company were identified during analysis. Mitigation steps for this specific threat include immediate blocking of the domain and its associated IP address (31.59.93.73) at the network perimeter. Organizations and individuals should implement multi-factor authentication (MFA) for gaming accounts to reduce the risk of unauthorized access, even if credentials are compromised. Users who may have interacted with this domain should reset their passwords immediately and monitor their accounts for suspicious activity. Security teams are advised to correlate this domain with other indicators of compromise, such as the registrar Spaceship, Inc., and the creation date of June 10, 2024, to identify potential related threats. Awareness campaigns highlighting the risks of fake login pages in gaming communities are recommended to prevent further victimization.