lobbygg[.]com

The domain lobbygg.com is assessed as a generic_phishing infrastructure impersonating a gaming team coordination service branded as LobbyGG. The threat primarily involves deceptive account creation or login flows designed to capture user credentials and potentially harvest gaming-related account data. Current status is taken offline, indicating partial disruption of active malicious operations.

Technical indicators show VirusTotal detection at 3/95 security vendors, with additional corroboration from AlienVault OTX where the domain appears in 2 threat intelligence pulses. The domain is registered through Cloudflare, Inc. and was created on October 08, 2025. Infrastructure analysis shows it resolves to IP 188.114.96.3. It appears on 1 security blocklist and is actively blocked by PhishDestroy. SSL certificate issuance is recorded from Google Trust Services, indicating use of a legitimate CA within a potentially abused hosting setup. The Gridinsoft trust score is 0/100, reflecting extremely low reputation and high risk classification.

Given its offline status, immediate active exploitation is currently mitigated; however, historical evidence suggests prior phishing deployment. Users who interacted with the domain should assume credential compromise risk and reset passwords for any accounts potentially used on the platform. Security teams should maintain IP and domain-level blocking, monitor for reactivation under similar naming patterns, and inspect traffic logs associated with 188.114.96.3. Continuous monitoring of Cloudflare-hosted newly registered domains with similar gaming-related branding is recommended to prevent recurrence.