dpln-quete[.]com

This domain is flagged as an elevated-risk phishing infrastructure specializing in brand impersonation targeting Fortnite players. The site masquerades as official gaming content to facilitate credential theft, in-game asset hijacking, or malware distribution under the guise of strategic guides. Analysis indicates the threat is tailored to exploit the victim’s trust in gaming communities, particularly those seeking unofficial guides or cheats. Infrastructure analysis reveals the domain dpln-quete.com was registered on August 8, 2025, through Tucows Domains Inc. and currently resolves to the IP address 192.142.10.5, hosted on AS214036 (Ultahost, Inc.) in the Netherlands. Security vendors on VirusTotal detect the domain with a 15/95 flag rate, while it appears on two independent blocklists: PhishDestroy and PhishingDB. The SSL certificate is issued by GoDaddy.com, Inc. (Go Daddy Secure Certificate Authority - G2), and the page title, 'Anomalie des moltrak - Guide stratégique Dofus pour les Noobs,' suggests an attempt to mislead users searching for gaming-related content, despite the clear Fortnite impersonation context. Mitigation requires immediate action from network defenders and end-users. Organizations should block the domain and its resolving IP (192.142.10.5) at the perimeter, while monitoring for related indicators such as the SSL certificate issuer or hosting provider (AS214036). End-users should be educated on recognizing brand impersonation tactics, particularly those leveraging gaming-related lures. Account holders are advised to enable multi-factor authentication and review recent login activity for unauthorized access. Given the domain’s offline status, continuous monitoring for re-registration or migration to new infrastructure is recommended.