# saxomem.com — SUSPICIOUS

> saxomem.com is an active phishing domain flagged on multiple blocklists. Stay alert and avoid interacting with this site. Learn more at PhishDestroy.

## Summary
PhishDestroy identifies saxomem.com as a low-risk generic phishing domain associated with the page title "SAXO." Although the overall threat level is low, phishing campaigns can evolve rapidly and lead to credential theft or unauthorized access. Users should remain cautious when encountering this domain as it attempts to deceive victims by mimicking legitimate services.

The domain saxomem.com was registered recently on March 12, 2026, through Gname.com Pte. Ltd., a registrar not uncommon in abuse cases. VirusTotal analysis reveals that 2 out of 95 security vendors have flagged this domain, and it currently appears on three distinct security blocklists. The domain resolves to IP address 188.114.96.3 and remains active, suggesting ongoing malicious activity or attempts to lure targets.

Users are strongly advised to avoid visiting saxomem.com or submitting any personal information on this site. Employing updated antivirus and anti-phishing tools can help detect and block such threats. Organizations should consider adding this domain to internal blocklists and educate employees about verifying URLs to mitigate potential phishing risks stemming from saxomem.com.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: alive (HTTP 530)
- Page title: SAXO

## Domain Intelligence
- Registered: 2026-03-12 13:07:01
- Registrar: Gname.com Pte. Ltd.
- Country: SG
- IP: 188.114.96.3
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["amy.ns.cloudflare.com", "cleo.ns.cloudflare.com"]
- SSL Issuer: Let's Encrypt / E8

## Detection Status
- VirusTotal: 2 vendors flagged
  Vendors: ["LevelBlue", "SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019ce201-b1f5-748d-805f-87387061cf5b.png
- PhishDestroy: https://phishdestroy.io/domain/saxomem.com/
- LLM endpoint: https://phishdestroy.io/domain/saxomem.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/saxomem.com/
Last updated: 2026-03-19