flaggedcontents-x[.]com
“Coming Soon”
flaggedcontents-x.com — Contenido no disponible. Suplantación de marca: X.com; Tipo de estafa: Social Media Phishing. Resumen de las pruebas: VirusTotal 1/93 (SOCRadar); 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 66/100. Registrador: Atak Domain Bilgi Tekn….
El análisis detallado de PhishDestroy AI se mantiene en inglés para conservar el registro forense original.
Analysis of flaggedcontents-x.com indicates a brand impersonation campaign targeting x.com, classified as social media phishing. The domain was registered on February 23, 2026, through Atak Domain Bilgi Teknolojileri A.S. and is currently offline. Infrastructure analysis reveals hosting on Microsoft Corporation's AS8075 (20.225.178.22, US) with Nginx serving a placeholder page titled 'Coming Soon.' The domain's MX records point to mail.flaggedcontents-x.com, suggesting potential email-based attack vectors, though no active phishing content has been confirmed.
Security vendor detections are minimal but notable: one of 93 engines on VirusTotal flagged the domain, and it appears on three blocklists, including PhishDestroy, MetaMask, and SEAL. The SSL certificate is issued by Let's Encrypt (R12), a common choice for both legitimate and malicious domains. Nameservers (ns1.md-3987.webhostingboxes.com, ns2.md-3987.webhostingboxes.com) are hosted on a shared provider, which may facilitate rapid domain cycling. The domain's trust score from Gridinsoft is 0/100, reinforcing its classification as high-risk.
While the 'Coming Soon' page suggests the campaign may not yet be fully operational, the infrastructure is consistent with phishing pre-deployment staging. Defenders should monitor for reactivation, particularly given the MX records and prior blocklist inclusion. No specific phishing kit or payload has been identified in available data, and the exact lure tactics remain unconfirmed. Organizations are advised to preemptively block the domain and associated IPs, scrutinize email traffic for references to flaggedcontents-x.com, and alert users to potential social media credential harvesting attempts.
Proceso de respuesta ante amenazas Pipeline
Estado de la lista de bloqueados pública
Captura guardada
Inteligencia de dominios
Detalles técnicosDNS, SAN de SSL, marcas de tiempo
ICANN OVERSIGHT
Acreditación y contexto RAA
Acreditación y contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Tecnologías · 1 identified
High-performance HTTP server and reverse proxy, known for stability and low resource usage.
Análisis de VirusTotal
Evidencias archivadas
Datos y informes externos
PD-20260223-E94C72 Recipient: abuse@microsoft.com ¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.