x2-str[.]live

Analysis of x2-str.live shows that the domain is currently active and resolves to the Cloudflare edge address 104.21.47.57, which belongs to AS13335 (Cloudflare, Inc.) and is located in the United States. The authoritative name servers are etienne.ns.cloudflare.com and summer.ns.cloudflare.com, indicating the domain is hosted behind Cloudflare's DNS and CDN services. The TLS certificate is issued by Google Trust Services under the WE1 trust profile, confirming that HTTPS connections are properly terminated by Cloudflare. The site returns an HTTP 403 status code while the page title presented to the client is “404 Not Found”, suggesting the server is deliberately blocking access to the landing page. Automated reputation scoring from Gridinsoft assigns a trust score of 0 out of 100, and the domain is listed on one external blocklist. VirusTotal analysis shows that 3 of 95 scanned security vendors flagged the domain, reinforcing the suspicion of malicious activity. PhishDestroy already blocks the domain, and the threat type has been classified as generic phishing with a high risk rating. Uncertainties remain regarding the specific phishing lure or credential‑harvesting page because the content has not been captured; the 404 page title provides no insight into the targeted brand or credential type. Defenders should add 104.21.47.57 and the domain name to outbound filtering rules, ensure DNS resolvers block both name‑server entries, and monitor for any TLS‑encrypted traffic to Cloudflare edge nodes that reference this host. Given the high risk rating, organizations should treat any email or web traffic that attempts to resolve or connect to x2-str.live as malicious and quarantine or drop the communication. Continuous re‑evaluation is recommended in case additional detections appear in threat feeds.