chikgamefun[.]xyz

PhishDestroy identifies phikgamefun.xyz (seed 9c7704) as an active credential-harvesting phishing site masquerading as a gaming portal. Visitors who enter login details risk direct theft of their account credentials and payment data, which are then relayed to attacker-controlled servers. The domain was registered on January 07, 2026 through NAMECHEAP INC and currently resolves to IP 172.67.174.190 with a Google Trust Services SSL certificate. Despite zero detections on VirusTotal (2/95 engines), the site remains under active analysis due to its pattern of impersonating popular gaming brands to bypass email filters.

This threat was flagged after automated crawlers observed a sequence of redirects culminating in a spoofed login page identical to a well-known gaming authentication system. The domain’s age (less than a week) and low VT score suggest a fresh campaign deliberately launched to exploit holiday traffic spikes. Historical WHOIS shows privacy protection enabled within hours of registration, a common tactic to hinder takedown efforts. SSL certificate issuance by Google Trust Services does not imply legitimacy; it only confirms basic encryption is in place.

If you visited chikgamefun.xyz and entered any credentials, immediately change those passwords on a different device. Scan the device you used with a reputable anti-malware tool and enable multi-factor authentication wherever possible. Report the incident to your organization’s security team or your email provider’s abuse channel if work or personal accounts were exposed.