clutchgod[.]pro

Analysis of the domain clutchgod.pro indicates it was established as a phishing infrastructure on March 6, 2026. The domain was registered through PDR Ltd. d/b/a PublicDomainRegistry.com and configured with Cloudflare nameservers henry.ns.cloudflare.com and naya.ns.cloudflare.com. It resolved to the IP address 172.67.199.57, which belongs to AS13335 (Cloudflare, Inc.) in the United States. No SSL certificate was detected on the domain, and it was served over HTTP/3, a protocol commonly used by Cloudflare-protected sites.

The page title 'pickwinner Platfrom' suggests the site was designed to mimic a platform or service named 'pickwinner,' though the exact nature of the scam—whether related to giveaways, account takeovers, or credential harvesting—remains unconfirmed due to the domain's current offline status. As of July 24, 2026, the domain appears on one security blocklist, and ten out of ninety-four security vendors on VirusTotal flagged it as malicious. Gridinsoft assigned a trust score of 0/100, reinforcing its classification as high-risk. Infrastructure analysis reveals the use of Cloudflare services, which may have been employed to obfuscate the true hosting origin or evade detection.

The domain was taken offline following identification, though defenders should remain vigilant for potential re-emergence under similar naming conventions or infrastructure. Network defenders are advised to block the domain and its associated IP address (172.67.199.57) at perimeter controls. If internal logs indicate prior access to clutchgod.pro, compromised credentials or session tokens should be invalidated, and affected users should be notified for remediation.