twitchgives[.]com

This domain, twitchgives.com, operates as a fraudulent Twitch Drops impersonation site targeting users of the Dota 2 gaming community. Analysis indicates the site presents a fabricated login interface under the page title 'Dota2 | Twitch Drops,' designed to harvest account credentials by mimicking legitimate reward distribution pages. The domain specifically exploits user trust in Twitch’s official drop campaigns, which are commonly used to distribute in-game items or rewards, thereby increasing the likelihood of successful credential theft from unsuspecting victims.

Infrastructure analysis reveals multiple technical indicators of malicious intent. The domain was registered on March 27, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with high-risk domains. It resolves to the IP address 104.21.16.210, hosted behind Cloudflare infrastructure in Canada, which is commonly leveraged to obscure the true origin of phishing sites. Security vendor detections on VirusTotal report 11 out of 95 engines flagging the domain as malicious, while it appears on at least one security blocklist. The SSL certificate, issued by Google Trust Services (WE1), further masks the site’s illegitimacy by presenting a seemingly valid encryption layer.

Users who visited twitchgives.com and entered credentials are advised to take immediate remedial action. All potentially exposed account passwords should be changed without delay, particularly for Twitch and associated gaming accounts. Multi-factor authentication should be enabled where available to mitigate unauthorized access. Affected users should also monitor their accounts for suspicious activity, such as unauthorized logins or transactions, and report any anomalies to the respective platform’s support team. Given the elevated risk level, organizations should consider blocking the domain and associated IP address at the network perimeter to prevent further exposure.