mdgames[.]xyz

PhishDestroy flags mdgames.xyz as a gaming-themed phishing domain designed to trick users into revealing login credentials or payment details under the guise of a game portal. The site mimics legitimate gaming sites to harvest account information, with no live malware payloads yet detected by endpoint scanners. Users entering any data risk immediate credential theft or financial fraud, especially if the site includes login forms or payment prompts. If you see prompts for usernames, passwords, or credit card numbers, exit immediately and avoid entering any information.

This domain was flagged by PhishDestroy after VirusTotal engines returned 0 detections out of 95 scanners, indicating that mainstream antivirus tools have not yet blacklisted the site. Domain registration data shows mdgames.xyz was created on April 05, 2026, and is registered through Dynadot LLC using a Let’s Encrypt SSL certificate. The site resolves to the IP address 91.218.49.169, which has no prior reputation for legitimate gaming services. The combination of a recently registered domain, low detection rate, and use of a free SSL certificate suggests an early-stage phishing operation likely targeting casual gamers or users seeking free game downloads.

If you visited mdgames.xyz and entered any personal information—especially login credentials, email addresses, or payment details—immediately change your passwords on other accounts and monitor your financial statements for unauthorized transactions. Run a full scan using a reputable antivirus or anti-malware tool to check for spyware or keyloggers. Report the domain to your email provider and bank if you entered credentials or payment data. Avoid downloading any files from the site, as they may contain trojans or ransomware. Share this warning with friends or communities who may have been targeted.