minecraft-apk-download[.]org

Analysis of minecraft-apk-download.org indicates a high-risk phishing domain targeting users seeking Minecraft Bedrock APK downloads for Android. The domain, registered on October 11, 2025, through NAMECHEAP INC, remains active as of July 12, 2026, and resolves to IP address 172.67.169.57. The site's page title explicitly advertises 'Download Minecraft Bedrock Latest Version (Xbox Live) for Android,' suggesting an attempt to deceive users into downloading malicious software under the guise of a legitimate game update. Technical indicators support the phishing classification. The domain appears on two security blocklists and has been flagged in 22 threat intelligence pulses on AlienVault OTX. Twelve of 95 security vendors on VirusTotal detect the domain as malicious. The SSL certificate is issued to an unnamed company, which is atypical for official game distribution platforms. The domain has a Gridinsoft trust score of 0/100, further corroborating its malicious nature. Defenders should treat this domain as confirmed malicious infrastructure. Network-level blocking of 172.67.169.57 and the domain itself is recommended. Given the targeting of mobile users, endpoint protection should be configured to detect and prevent the execution of any APK files downloaded from this source. The domain's registration through a common registrar and use of a content delivery network IP address suggest it may be part of a larger, low-cost phishing campaign. No evidence currently links this domain to a specific phishing kit or advanced persistent threat group.