dofuspourlesnoobe[.]com

Analysis of www.dofuspourlesnoobe.com shows the domain was registered on 2026-05-04 through TUCOWS.COM and is hosted on IPv4 address 209.141.55.95 located in the United States, ASN 53667 (FranTech Solutions). The domain resolves via three Njalla nameservers (1-you.njalla.no, 2-can.njalla.in, 3-get.njalla.fo) and serves content over HTTPS using a Let’s Encrypt certificate (E8). HTTP requests return status 200 and the web server identifies as Nginx on Ubuntu. The page title returned is "Kordash Sombre". VirusTotal reports 7 of 91 security vendors flagging the domain, and it appears on one public blocklist while being blocked by PhishDestroy. The threat is classified as generic credential phishing with a high risk rating and remains active. No additional payload or credential‑harvesting page content has been observed; the specific target brand is not disclosed in the available data. Defenders should block the domain and its associated IP, monitor traffic to the Njalla name servers, and add the host to internal deny lists. Ongoing monitoring of threat‑intel feeds for any new indicators is recommended.