# ebay.hiaww.com — SUSPICIOUS > PhishDestroy identifies ebay.hiaww.com as a fake login phishing domain impersonating eBay. VT score 0/95 despite active campaign. ## Summary Domain ebay.hiaww.com is a fake login phishing page impersonating eBay, currently active with a crypto drainer kit. VirusTotal shows 0/95 detections, registered via Gname.com Pte. Ltd. on May 13, 2015, resolving to IP 188.114.96.3 with a Let's Encrypt SSL certificate. No Google Safe Browsing (GSB) blocklist entries detected. PhishDestroy flagged this domain under active investigation (seed d97199) with risk level under_investigation. Response actions include real-time monitoring and domain takedown coordination. Remaining risk remains high due to low detection rates and active campaign status. Users are advised to avoid interacting with this domain and verify links via PhishDestroy before entering credentials. ## Threat Details - Verdict: SUSPICIOUS - Site status: unknown (HTTP ?) ## Domain Intelligence - Registered: 2015-05-13 07:47:34 - Registrar: Gname.com Pte. Ltd. - IP: 188.114.96.3 ## Detection Status - VirusTotal: 0 vendors flagged - Google Safe Browsing: clean - Blocklists: 0 hits ## Evidence - Cloudflare Radar: https://radar.cloudflare.com/domains/ebay.hiaww.com - PhishDestroy: https://phishdestroy.io/domain/ebay.hiaww.com/ - LLM endpoint: https://phishdestroy.io/domain/ebay.hiaww.com/llm.txt ## If You Visited This Site 1. Change any passwords you may have entered 2. Enable 2FA on all related accounts 3. Monitor your accounts for unauthorized activity 4. Report to: FBI IC3, Europol, local authorities --- Report by PhishDestroy | https://phishdestroy.io/domain/ebay.hiaww.com/ Last updated: 2026-03-20