# xpoints.fun — SUSPICIOUS

> PhishDestroy identifies xpoints.fun hosting a fake loyalty points phishing scam. One vendor already flags this domain—Check the full report.

## Summary
PhishDestroy identifies the active domain xpoints.fun impersonating a loyalty points program to harvest user credentials. The page is currently under investigation with a risk level set to active.

This domain was flagged by 0 of 95 VirusTotal vendors, registered through TUCOWS.COM, CO. The SSL certificate is issued by Let’s Encrypt, the domain resolves to IP 104.21.51.71, and it was created on March 19, 2026.

PhishDestroy advises users and organizations to block the domain xpoints.fun and the associated IP address 104.21.51.71. Avoid interacting with any loyalty point-themed emails or pages linked to this domain. Report suspicious activity through official channels to prevent credential theft and financial loss.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-19 17:58:37
- Registrar: TUCOWS.COM, CO.
- IP: 104.21.51.71

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/04e9b713-9f20-40ec-9f2d-4cd24d8acfa6
- PhishDestroy: https://phishdestroy.io/domain/xpoints.fun/
- LLM endpoint: https://phishdestroy.io/domain/xpoints.fun/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/xpoints.fun/
Last updated: 2026-03-30