foxyarcade[.]xyz

This domain, foxyarcade.xyz, is identified as a generic phishing site impersonating the Foxy Vaders gaming brand. Analysis of the page title, 'Foxy Vaders,' and detected infrastructure suggests an attempt to deceive users into engaging with fraudulent gaming content or credential harvesting schemes. No specific drainer kit signatures were observed, but the combination of React, Next.js, and Webpack indicates a modern, potentially obfuscated phishing framework designed to evade basic detection mechanisms. Technical indicators confirm elevated risk: the domain resolves to IP 137.184.91.44 and was registered through Namecheap on March 26, 2026. VirusTotal reports 5 out of 95 security vendors flagging this domain as malicious, while Gridinsoft assigns a trust score of 0/100. The domain appears on one security blocklist and is currently blocked by PhishDestroy. Google Safe Browsing status was not explicitly provided, but the low detection rate on VirusTotal suggests either a targeted campaign or recent deployment. As of the latest assessment, foxyarcade.xyz has been taken offline, likely due to enforcement actions by hosting providers or registrars. However, the domain remains registered, posing a residual risk of reactivation or migration to a new infrastructure. Users who interacted with this site should assume potential exposure of credentials or personal data. Organizations are advised to monitor network logs for connections to 137.184.91.44 and implement DNS-based blocking for foxyarcade.xyz. Given the domain's recent creation and low detection rate, heightened vigilance is recommended for similar phishing campaigns leveraging gaming-themed lures.