# www.xpd.lol — SUSPICIOUS

> PhishDestroy is monitoring www.xpd.lol for possible phishing threats. Stay alert and avoid interacting with this domain until further notice.

## Summary
PhishDestroy has identified www.xpd.lol as a domain under investigation due to suspicions of generic phishing activity. Although there are no current detections by major security vendors, the domain’s recent creation and the placeholder page title "Just a moment..." raise concerns about its intent.

The domain was registered on March 8, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com and resolves to the IP address 188.114.96.3. Despite a clean VirusTotal report with zero detections across 95 engines, the domain’s infrastructure and registration details are consistent with emerging phishing campaigns. This warrants cautious monitoring.

At this time, www.xpd.lol remains active but under close scrutiny by PhishDestroy analysts. Users are advised to exercise caution and refrain from engaging with this domain until further intelligence is gathered. Organizations should consider adding it to their internal watchlists and continue to evaluate related network traffic for suspicious behavior.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 403)
- Page title: Just a moment...

## Domain Intelligence
- Registered: 2026-03-09 13:07:02
- Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
- Country: IN
- IP: 188.114.96.3
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: amos.ns.cloudflare.com maya.ns.cloudflare.com
- SSL Issuer: Let's Encrypt / E7

## Detection Status
- VirusTotal: 1 vendors flagged
  Vendors: ["SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cd299-fdef-7320-b88f-3bc8c018503c.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/a9d0a090-c88f-4e12-827e-150921a564ba
- PhishDestroy: https://phishdestroy.io/domain/www.xpd.lol/
- LLM endpoint: https://phishdestroy.io/domain/www.xpd.lol/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/www.xpd.lol/
Last updated: 2026-03-19