notwifgary[.]xyz

The domain notwifgary.xyz is a confirmed phishing site engaged in brand impersonation targeting Discord users. It presents itself as an airdrop scam under the name 'NotWifGary,' attempting to deceive victims into disclosing login credentials or other sensitive information. No crypto drainer kit was identified in this campaign. As of the latest verification, notwifgary.xyz has been taken offline, though prior activity remains a risk for those who interacted with it.

Technical indicators confirm the malicious nature of notwifgary.xyz. The domain was flagged by 3 of 95 security vendors on VirusTotal, including alphaMountain.ai, Forcepoint ThreatSeeker, and G-Data. It appears on 5 security blocklists, including PhishDestroy, ScamSniffer, and Polkadot. Registered through NameCheap, Inc. on July 25, 2025, the domain resolves to the IP address 172.67.147.161, hosted on Cloudflare's infrastructure in the US. No SSL certificate was issued for the site, and its observed page title was 'Join NotWifGary Airdrop Now!'.

Individuals who visited notwifgary.xyz should immediately change their Discord passwords and enable two-factor authentication to prevent unauthorized access. Monitor accounts for signs of fraud, such as unexpected messages or unauthorized logins. Victims are advised to report the domain to Discord’s trust and safety team and submit the URL to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group to aid in broader mitigation efforts.