portaldesk-x[.]com

On July 23, 2026, a technical investigation was conducted on portaldesk-x.com. The domain was registered through Hostinger operations, UAB on February 23, 2026 and is currently marked as offline. DNS resolution points to the IP address 84.32.84.32, which belongs to AS47583 Hostinger International Limited and is geolocated in Lithuania. The authoritative nameservers are ns1.dns-parking.com and ns2.dns-parking.com, and the site presents the page title "Parked Domain name on Hostinger DNS system," indicating a parked landing page rather than active phishing content. No SSL certificate is associated with the domain, confirming the absence of HTTPS protection.

VirusTotal analysis shows that two of ninety‑three security vendors flagged portaldesk-x.com, providing limited but notable detection evidence. The domain appears on three security blocklists and has been explicitly blocked by PhishDestroy, MetaMask, and SEAL, reinforcing its classification as a threat. Mail infrastructure is hosted by Mailgun, as evidenced by MX records referencing mxa.mailgun.org and mxb.mailgun.org, which aligns with the observed technology fingerprint of Mailgun.

The documented scam type is Social Media Phishing, though the exact phishing payload or credential‑harvesting page has not been captured because the domain currently serves only a parked page. Consequently, the precise tactics, techniques, and procedures (TTPs) employed by the actors remain uncertain. Defenders should continue to enforce blocking of the domain and its associated IP address, monitor the DNS records for any changes that could indicate re‑activation, and consider adding the IP to network‑level deny lists. Ongoing surveillance of VirusTotal and blocklist updates is recommended to capture any future malicious activity linked to portaldesk-x.com.