clashofapp[.]click

PhishDestroy identifies clashofapp.click as an active fake login scam targeting cryptocurrency users through a counterfeit Clash of Clans wallet interface. The domain operates as a generic phishing page designed to harvest wallet credentials and seed phrases, with no affiliation to Supercell or official gaming platforms. This domain was flagged by SEAL and resolved to IP 188.114.97.3 at the time of analysis. The threat infrastructure was registered through Global Domain Group LLC on May 10, 2026, and currently appears on one active security blocklist. VirusTotal scans returned a zero detection rate (9/95 engines), aligning with the domain’s recent creation and low historical exposure. The site utilizes a legitimate Let’s Encrypt SSL certificate, which may mislead users into believing the connection is secure. The infrastructure remains active despite limited detection coverage, indicating a potentially emerging threat with elevated risk due to zero detections on major scanning platforms. PhishDestroy recommends immediate caution when accessing domains related to this campaign. Users are advised to verify any suspicious link using PhishDestroy’s real-time scanning tool before entering sensitive information. The domain’s status is under continued investigation, with an ongoing risk of expanded phishing campaigns leveraging similar domains or infrastructure. Actionable guidance includes avoiding direct interaction with the domain and reporting any encountered instances to PhishDestroy for rapid response and blocklist propagation.