pudgysmash[.]xyz

PhishDestroy identifies pudgysmash.xyz as an active generic phishing domain registered specifically to distribute a gaming-branded cryptocurrency drainer kit targeting unsuspecting users via fake game assets or NFT rewards. The site leverages deceptive visuals mimicking popular blockchain gaming interfaces to trick victims into connecting wallets and signing malicious transactions. No ties to a major brand or previously documented drainer kit family have been observed at this stage, indicating a likely bespoke or repurposed campaign using off-the-shelf tools. Domain age is extremely low, with creation on February 27, 2026, suggesting opportunistic deployment geared toward short-lived, high-impact fraud operations. The threat vector remains focused on asset exfiltration using social engineering around gaming spoils.

This domain resolves to IP address 216.198.79.1 and is registered through HOSTINGER operations, UAB. VirusTotal currently shows 0 detections out of 95 engines as of the latest scan. The domain holds a valid SSL certificate issued by Let's Encrypt, and no blocklist entries have been recorded in public threat feeds at this time. Domain age is less than one day from creation timestamp, highlighting rapid deployment with minimal forensic footprint. Google Safe Browsing (GSB) has not yet flagged this domain, indicating it remains unindexed or newly emerged and not yet processed by major classification systems.

Pudgysmash.xyz is currently flagged as 'active' with a risk status of 'under_investigation' by PhishDestroy threat intelligence. The domain has not been added to any known blocklists due to its novelty and zero detection score. Response actions are ongoing, including IP and domain sinkholing, SSL certificate revocation monitoring, and outreach to hosting provider HOSTINGER for immediate takedown. While current risk is elevated due to active operation and lack of detection, the low VT score and absence from GSB suggest a window of exposure exists. Users are strongly advised to avoid visiting pudgysmash.xyz and to verify all game-related asset sites via official channels. Blocking 216.198.79.1 at the network perimeter is recommended as a precautionary measure.