# rewards-nado.xyz — SUSPICIOUS

> Caution advised for rewards-nado.xyz. Low-risk phishing detected; avoid sharing sensitive info on this active domain.

## Summary
PhishDestroy identifies rewards-nado.xyz as a domain associated with generic phishing activities, posing a low level of risk to users. Although the threat is not currently severe, phishing attempts can lead to unauthorized data access or credential theft, making vigilance important. Users should be aware that even low-risk phishing sites can be gateways to broader cyber attacks.

The domain rewards-nado.xyz was registered on March 6, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com. It resolves to IP address 172.67.216.9 and is currently active. While VirusTotal flags this domain by only 2 out of 95 security vendors, this limited detection does not eliminate the potential threat. The domain’s recent creation and association with a generic phishing category suggest it is part of ongoing low-scale phishing campaigns.

Users are advised to exercise caution when encountering this domain, avoiding the input of any personal or financial information. Organizations should consider blocking this domain at the network level and monitor for any phishing attempts linked to it. Maintaining up-to-date security solutions and user awareness can help mitigate the risks posed by domains like rewards-nado.xyz.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 0)
- Page title: Nado Orderbook DEX | Unified Perps

## Domain Intelligence
- Registered: 2026-03-06 21:07:02
- Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
- Country: IN
- IP: 172.67.216.9
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["vicky.ns.cloudflare.com", "gail.ns.cloudflare.com"]
- SSL Issuer: none

## Detection Status
- VirusTotal: 1 vendors flagged
  Vendors: ["Trustwave"]
- Google Safe Browsing: clean
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cc4c5-aee1-705f-b3e3-cee04492899f.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/ff030547-374b-4b37-839c-0bc682dbbeeb
- Wayback Machine: https://web.archive.org/web/https://rewards-nado.xyz
- PhishDestroy: https://phishdestroy.io/domain/rewards-nado.xyz/
- LLM endpoint: https://phishdestroy.io/domain/rewards-nado.xyz/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/rewards-nado.xyz/
Last updated: 2026-03-19