mdgamesrblx[.]click

The domain mdgamesrblx.click was registered through Dynadot LLC on March 05, 2026 and is currently taken offline. DNS resolution points to the IP address 91.218.49.169, which belongs to Autonomous System AS6698 operated by Virtual Systems LLC and is geolocated in Ukraine. The domain is served without an SSL/TLS certificate, indicating that any web traffic would have been delivered over unencrypted HTTP. The sole observable page title returned by the host is "Add Robox," suggesting an attempt to lure victims with a promise of in‑game currency, a pattern consistent with generic phishing campaigns targeting gaming communities.

Four of ninety‑five security vendors on VirusTotal flagged the domain, providing independent corroboration of malicious intent. The site is listed on a single external security blocklist and has been actively blocked by the PhishDestroy mitigation service. Nameserver records point to jill.theonionhost.com and ray.theonionhost.com, both of which are associated with the same hosting provider and may be reused for additional malicious domains.

No further technical details, such as HTTP response codes or payload analysis, are available because the site is no longer reachable. Given the confirmed detection counts, the presence on a blocklist, and the lack of transport security, defenders should continue to deny any connections to mdgamesrblx.click, add the domain and its resolving IP 91.218.49.169 to outbound filtering rules, and monitor the associated nameservers for future registrations that may reuse the same infrastructure. Continuous observation of the AS6698 range is advised, as the hosting environment has demonstrated a propensity for phishing‑related activity.