exiled-bot[.]app

This domain, exiled-bot.app, is flagged as an active high-risk phishing site targeting users of Path of Exile 2, a popular online action role-playing game. Analysis of the page title, 'ExiledBot 2: Бот для Path of Exile 2 - Авто-фарм и Боевая помощь,' indicates the site claims to offer automated farming and combat assistance tools, commonly known as 'bots,' for the game. Such tools are frequently associated with scams, as they often distribute malware, steal account credentials, or defraud users through fake software sales. Infrastructure analysis reveals the domain is hosted behind Cloudflare (AS13335), a service often used to obscure the true origin of malicious sites and protect them from takedowns. The domain resolves to the IP address 104.21.31.236, which is geolocated in the United States. A 301 HTTP redirect is present, though the destination is not confirmed in the available data. The domain was registered on February 21, 2026, through NiceNIC International Group Co., Limited, and uses Cloudflare nameservers (magdalena.ns.cloudflare.com and wells.ns.cloudflare.com). The SSL certificate is issued by Google Trust Services, which does not inherently indicate legitimacy. Security vendors have flagged the domain, with two out of 93 detecting it as malicious on VirusTotal. It also appears on at least one security blocklist. While the detection rate is currently low, this does not guarantee safety, as phishing domains often evade detection during early stages of operation. The site remains active as of July 12, 2026, and is blocked by at least one security service. Defenders should treat this domain as a confirmed phishing threat targeting gamers. Network-level blocking is recommended, and users should be warned against downloading software or entering credentials on this site. Further analysis of the redirect chain and any associated malware samples would provide additional context, but current evidence supports immediate mitigation.