# changeum.org — SUSPICIOUS

> changeum.org shows low-level phishing activity. Avoid sharing personal info and steer clear of this site to protect your data.

## Summary
PhishDestroy identifies changeum.org as a domain linked to low-risk generic phishing activity. While the threat level is currently low, users should remain cautious as phishing attempts can lead to stolen personal information or compromised accounts.

This phishing effort typically involves tricking users into revealing sensitive information by mimicking legitimate websites or offering deceptive content. The domain is newly registered and appears on multiple blocklists, indicating suspicious behavior despite limited vendor detections.

If someone has visited changeum.org, they should avoid entering any personal or financial details. Running a security scan and monitoring accounts for unusual activity is recommended to prevent potential harm.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 403)
- Page title: Just a moment...

## Domain Intelligence
- Registered: 2026-03-05 15:07:02
- Registrar: Dynadot LLC
- Country: US
- IP: 172.67.160.107
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["leonard.ns.cloudflare.com", "teresa.ns.cloudflare.com"]
- SSL Issuer: Let's Encrypt / E8

## Detection Status
- VirusTotal: 1 vendors flagged
  Vendors: ["CRDF"]
- Google Safe Browsing: clean
- Blocklists: 4 hits
  Lists: ["PhishDestroy", "MetaMask", "ScamSniffer", "SEAL"]

## Evidence
- Screenshot: https://i.ibb.co/zWfr5sQb/9cb119044429.png
- Cloudflare Radar: https://radar.cloudflare.com/domains/changeum.org
- Wayback Machine: https://web.archive.org/web/https://changeum.org
- PhishDestroy: https://phishdestroy.io/domain/changeum.org/
- LLM endpoint: https://phishdestroy.io/domain/changeum.org/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/changeum.org/
Last updated: 2026-03-19