mcleaks[.]de

Analysis indicates that mcleaks.de is an active phishing domain registered on March 10, 2026. The domain resolves to 104.21.36.68, hosted on Cloudflare infrastructure (AS13335) in the United States. The page title 'MCLeaks.de' suggests a focus on Minecraft-related content, though the exact nature of the scam—whether it targets account credentials, in-game items, or other user data—remains unconfirmed without further content analysis. The domain is flagged by at least one security blocklist, and 12 of 94 security vendors on VirusTotal have detected it as malicious. The site employs Cloudflare services, including HTTP/3 and Browser Insights, which may complicate takedown efforts or attribution. Defenders should treat this domain as high-risk and consider blocking it at the network level, particularly in environments where Minecraft or gaming-related activity is prevalent. The SSL certificate, issued by Google Trust Services, does not mitigate the threat, as phishing sites commonly use valid certificates. No evidence of a known phishing kit or specific brand impersonation is present in the available data, but the combination of registration recency, Cloudflare hosting, and security vendor detections aligns with typical phishing infrastructure patterns.