# chatcharoen.xyz — SUSPICIOUS

> Chatcharoen.xyz is a medium-risk phishing domain flagged by multiple blocklists. Avoid interacting with it and report suspicious activity.

## Summary
PhishDestroy identifies chatcharoen.xyz as a medium-risk generic phishing domain used to deceive users and capture sensitive information. This threat remains relevant due to ongoing phishing risks targeting unsuspecting individuals.

The domain was registered through HOSTINGER operations, UAB on March 12, 2026. It appeared on three security blocklists and was flagged by 3 out of 95 VirusTotal security vendors before being taken offline, indicating active phishing infrastructure.

Users should avoid visiting chatcharoen.xyz or engaging with emails referencing it. Report any suspicious links and ensure security software is up to date to reduce exposure to phishing attempts associated with this domain.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 200)

## Domain Intelligence
- Registered: 2026-03-12 13:07:01
- Registrar: HOSTINGER operations, UAB
- Country: LT
- Nameservers: ["kristina.ns.cloudflare.com", "nicolas.ns.cloudflare.com"]

## Detection Status
- VirusTotal: 3 vendors flagged
  Vendors: ["Forcepoint ThreatSeeker", "SOCRadar", "Webroot"]
- Google Safe Browsing: clean
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Evidence
- PhishDestroy: https://phishdestroy.io/domain/chatcharoen.xyz/
- LLM endpoint: https://phishdestroy.io/domain/chatcharoen.xyz/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/chatcharoen.xyz/
Last updated: 2026-03-19