dofus-com[.]com

This domain is flagged as a high-risk phishing infrastructure specifically targeting players of the MMORPG DOFUS through a fraudulent tournament page. Analysis indicates the site employs social engineering tactics, masquerading as an official event under the title 'SONGE TOURNAMENT - Info - Actualités - DOFUS, le MMORPG stratégique,' to harvest user credentials and account details. Infrastructure analysis reveals multiple technical indicators of malicious intent. The domain dofus-com.com was registered on May 18, 2026, through Hosting Concepts B.V. d/b/a Registrar.eu, and currently resolves to the IP address 176.123.0.55, hosted by Alexhost SRL in Moldova. Security assessments show 4 out of 95 vendors on VirusTotal flag the domain as malicious, while it appears on two security blocklists, including PhishDestroy and PhishingDB. The site uses a Let's Encrypt SSL certificate (R12), which, while providing encryption, is commonly exploited by threat actors to lend a false sense of legitimacy to phishing pages. Mitigation against this specific threat type requires a multi-layered approach. Organizations and individuals should immediately block the domain and its resolving IP at the network perimeter. End-users should be educated to recognize phishing indicators, such as mismatched URLs, unofficial domain registrations, and unsolicited tournament invitations. Account holders are advised to enable multi-factor authentication and monitor for unauthorized access attempts. Given the domain's active status and targeted nature, security teams should treat any interaction with this infrastructure as a potential compromise and initiate incident response protocols accordingly.