# paxosreward.live — SUSPICIOUS

> paxosreward.live is a phishing site pretending to offer Paxos rewards. Stay safe by avoiding this domain and never share personal info.

## Summary
PhishDestroy identifies paxosreward.live as a low-risk phishing domain that impersonates the Paxos cryptocurrency rewards program. Although currently offline, this domain was flagged due to appearing on multiple security blocklists and being detected by a small number of security vendors. Users should be cautious as such sites aim to deceive visitors by mimicking trusted brands to steal sensitive information.

This phishing attempt involved presenting a fake “Paxos — Early Supporter Rewards” page designed to lure users into believing they could claim cryptocurrency rewards. By exploiting the trust in the Paxos brand, attackers may have sought to collect login credentials, wallet keys, or other personal details. The domain was registered recently through NiceNIC International Group Co., Limited and resolved to an IP address that does not belong to the official Paxos infrastructure, indicating fraudulent intent.

If you have visited paxosreward.live, it is important to refrain from entering any personal or financial information. Users should immediately change passwords for related accounts and monitor financial activity for suspicious transactions. Employing multi-factor authentication and running up-to-date antivirus scans are also recommended. Always verify URLs carefully and rely on official channels when engaging with cryptocurrency services to avoid falling victim to phishing scams.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 0)
- Page title: Paxos — Early Supporter Rewards

## Domain Intelligence
- Registered: 2026-03-06 15:07:01
- Registrar: NiceNIC International Group Co., Limited
- Country: HK
- IP: 216.150.1.1
- IP Org: Cloudflare CDN
- Nameservers: malavika.ns.cloudflare.com neil.ns.cloudflare.com
- SSL Issuer: none

## Detection Status
- VirusTotal: 2 vendors flagged
  Vendors: ["alphaMountain.ai", "PhishFort"]
- Google Safe Browsing: clean
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cc367-05fb-764a-9389-00e9fcb8add6.png
- Cloudflare Radar: https://radar.cloudflare.com/domains/paxosreward.live
- Wayback Machine: https://web.archive.org/web/https://paxosreward.live
- PhishDestroy: https://phishdestroy.io/domain/paxosreward.live/
- LLM endpoint: https://phishdestroy.io/domain/paxosreward.live/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/paxosreward.live/
Last updated: 2026-03-19