# xahaureward.info — SUSPICIOUS

> xahaureward.info is an active phishing site flagged as medium risk. Stay alert and learn how to protect yourself from potential scams on this domain.

## Summary
PhishDestroy identifies xahaureward.info as an active generic phishing threat posing a medium risk to users. This domain attempts to deceive visitors, potentially leading to credential theft or financial loss, making awareness crucial for online safety.

The domain xahaureward.info was registered on March 13, 2026, through NiceNIC International Group Co., Limited and currently resolves to the IP address 188.114.97.3. It is listed on one security blocklist and has been flagged by 3 out of 95 security vendors on VirusTotal, indicating a notable but not widespread detection rate.

Users are advised to exercise caution when encountering this domain, avoid submitting personal or financial information, and verify website authenticity through trusted sources. Employing security tools such as updated antivirus software and browser filters can help mitigate risk from domains like xahaureward.info.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: alive (HTTP 530)
- Page title: xahaureward.info/

## Domain Intelligence
- Registered: 2026-03-13 03:07:02
- Expires: 2027-03-09 13:52:11
- Registrar: NiceNIC International Group Co., Limited
- Country: HK
- IP: 188.114.97.3
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: haley.ns.cloudflare.com keanu.ns.cloudflare.com
- SSL Issuer: Let's Encrypt / E7

## Detection Status
- VirusTotal: 3 vendors flagged
  Vendors: ["alphaMountain.ai", "Gridinsoft", "SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019ce544-a77c-73fe-9706-76b256c783ad.png
- PhishDestroy: https://phishdestroy.io/domain/xahaureward.info/
- LLM endpoint: https://phishdestroy.io/domain/xahaureward.info/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/xahaureward.info/
Last updated: 2026-03-19