collab-land[.]x10[.]bz

The domain collab-land.x10.bz was registered on 21 February 2026 and resolves to IP 104.26.9.215, an address owned by Cloudflare, Inc. (AS13335) and geolocated in the United States. The site presented the page title “Free Hosting Account Suspended – x10hosting” and used a typical web stack that includes Bootstrap, jQuery, Google Tag Manager, Google Analytics, Google AdSense and Cloudflare CDN. The TLS certificate is issued by Let’s Encrypt with an E7 identifier, confirming a valid HTTPS endpoint at the time of capture. Security telemetry indicates the domain appears on three public blocklists—PhishDestroy, ScamSniffer and Enkrypt—and was flagged by nine of ninety‑three VirusTotal scanners.

The Gridinsoft trust score is 0 / 100, reinforcing the malicious assessment. MX records list a single mail server (priority 10) at mail.collab-land.x10.bz, matching the provider’s default configuration. The threat is classified as an account‑takeover campaign that leverages a fabricated “account suspended” notice to entice victims into revealing credentials for a purported x10hosting account. While the page title and observed infrastructure suggest a social‑engineering lure, no additional payload or credential‑capture page has been captured, so the exact phishing kit remains unknown.

Defenders should add collab-land.x10.bz to deny‑list rules, block its IP address 104.26.9.215, and monitor DNS queries for the associated mail host. Because the domain is hosted behind Cloudflare, future re‑hosting could reuse the same edge IP range, so broader Cloudflare edge filtering may be warranted. Continuous re‑scanning with aggregators such as VirusTotal is recommended to capture any new detections. Organizations that use x10hosting services should verify account status through official channels and educate users about unsolicited suspension notices.