bcgamez[.]xyz

The domain bcgamez.xyz has been flagged as an active fake login page designed to steal cryptocurrency credentials, specifically targeting users of the BC.Game platform. This site employs deceptive tactics to mimic the legitimate BC.Game login interface, tricking victims into entering their wallet credentials or private keys. The infrastructure suggests a high-risk operation aimed at draining digital assets, with no legitimate affiliation to BC.Game or any other gaming platform. PhishDestroy identifies this as a targeted credential harvesting campaign with potential for significant financial loss.

Technical analysis reveals multiple red flags: the domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, resolving to IP 172.67.198.114. Domain creation occurred on April 14, 2026, with a Let's Encrypt SSL certificate providing a false sense of security. VirusTotal currently shows 10/95 detections, indicating this threat remains under the radar of mainstream security tools. The domain has not been flagged by Google Safe Browsing (GSB) and is not listed on any public blocklists, increasing its potential reach to unsuspecting victims. These indicators suggest a recently deployed, sophisticated threat still in its operational infancy.

Currently, bcgamez.xyz remains active with an 'under_investigation' status in PhishDestroy's database. The domain exhibits all hallmarks of a crypto drainer operation, with the unique seed identifier 26d99c confirming its tracking in PhishDestroy's threat intelligence framework. Security researchers are advised to continue monitoring as this domain's VT score may increase as more samples are analyzed. Users are strongly urged to verify any suspicious BC.Game-related links through PhishDestroy before entering credentials. The remaining risk is classified as high due to the domain's recent deployment, lack of detection, and clear intent to deceive crypto users.