# xenavoruldex.net — MALICIOUS

> xenavoruldex.net flagged for phishing and social engineering. Stay alert and avoid sharing info. Check PhishDestroy for updates and protect yourself today.

## Summary
PhishDestroy identifies xenavoruldex.net as an active domain involved in generic phishing activities, marked by Google Safe Browsing as a social engineering threat. Although it currently has no detections on VirusTotal, the domain’s suspicious behavior and warning status indicate potential risks to users' sensitive information.

The domain xenavoruldex.net resolves to IP 104.21.20.208 and was registered recently on February 15, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com. This recent registration combined with active social engineering flags suggests it is part of an emerging phishing campaign under active investigation.

Users are advised to exercise caution when interacting with xenavoruldex.net or any unsolicited links claiming legitimacy from this domain. Avoid entering personal or financial information and consult PhishDestroy for the latest threat intelligence updates. Reporting suspicious activity helps strengthen community defenses against evolving phishing threats.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 403)
- Page title: Suspected phishing site | Cloudflare

## Domain Intelligence
- Registered: 2026-03-09 13:07:02
- Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
- Country: IN
- IP: 104.21.20.208
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: bob.ns.cloudflare.com vera.ns.cloudflare.com
- SSL Issuer: none

## Detection Status
- VirusTotal: 16 vendors flagged
  Vendors: ["ADMINUSLabs", "alphaMountain.ai", "BitDefender", "CRDF", "CyRadar", "ESET", "Forcepoint ThreatSeeker", "Fortinet", "G-Data", "Google Safebrowsing", "Gridinsoft", "Lionic", "Netcraft", "SOCRadar", "Sophos", "Webroot"]
- Google Safe Browsing: FLAGGED
- Blocklists: 2 hits
  Lists: ["PhishDestroy", "MetaMask"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cd26a-bdfc-702b-b7ba-84511c7a66fe.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/d165a4c8-d423-418a-a325-5923a346d374
- PhishDestroy: https://phishdestroy.io/domain/xenavoruldex.net/
- LLM endpoint: https://phishdestroy.io/domain/xenavoruldex.net/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/xenavoruldex.net/
Last updated: 2026-03-19