eslbenelux[.]com

PhishDestroy identified eslbenelux.com as a brand impersonation phishing domain targeting Twitch. The page title 'National Championship - ESL Benelux' was crafted to mimic legitimate ESL Benelux content, aiming to deceive users into revealing credentials or sensitive information. No drainer kit was detected in this campaign. The domain was registered through Dominet (HK) Limited, a registrar sometimes associated with malicious domains. VirusTotal data shows 7 out of 95 security vendors flagged this domain, indicating moderate detection coverage. The domain resolves to IP address 188.114.96.3 and was created on November 08, 2025. It appears on 1 security blocklist but was not found on Google Safe Browsing. Notably, the domain lacks an SSL certificate, increasing the risk of data interception. As of the latest check, the domain has been taken offline, reducing immediate threat to users. However, the underlying infrastructure may be reused for similar attacks. PhishDestroy recommends that users who may have interacted with the site change their Twitch passwords and enable two-factor authentication. Organizations should monitor for similar domains and educate users about verifying official URLs before entering credentials.