# xa90p.com — MALICIOUS

> PhishDestroy flags xa90p.com as a crypto drainer—15/95 security vendors detected it. Verify sites before entering credentials to stay safe.

## Summary
PhishDestroy identifies xa90p.com as an active crypto drainer posing as legitimate login portals to steal cryptocurrency assets.

This domain was flagged by 15 out of 95 VirusTotal security vendors, indicating a high risk of malicious activity. xa90p.com was registered on March 16, 2026, through Internet Domain Service BS Corp. and resolves to IP address 37.77.150.168. The site also holds a Let's Encrypt SSL certificate, which may misleadingly suggest legitimacy.

If you visited xa90p.com, avoid entering any credentials or cryptocurrency wallet details immediately. Disconnect from the site and scan your device for malware. Report the domain to PhishDestroy for verification. Always verify URLs manually before interacting with online services.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-16 12:32:52
- Registrar: Internet Domain Service BS Corp.
- IP: 37.77.150.168

## Detection Status
- VirusTotal: 15 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/8da00a8a-4680-4cc0-95a6-4831b273b1c7
- PhishDestroy: https://phishdestroy.io/domain/xa90p.com/
- LLM endpoint: https://phishdestroy.io/domain/xa90p.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/xa90p.com/
Last updated: 2026-03-21