casealert-x[.]com

Analysis performed on July 23, 2026 indicates that the domain casealert-x.com is currently offline but was previously used for a social media phishing campaign. The domain was created on February 23, 2026 and registered through Unstoppable Domains, a service that provides decentralized domain registration. DNS resolution points to the IP address 34.42.100.71, which belongs to AS396982 owned by Google LLC and is geolocated in the United States. The authoritative name servers are ns-cloud-e1.googledomains.com, ns-cloud-e2.googledomains.com, and ns-cloud-e3.googledo, confirming the use of Google Cloud DNS infrastructure.

No TLS certificate was observed, meaning the site was served over HTTP only, which reduces transport security and may facilitate credential capture. The page title returned by the server reads "casealert-x.com | Unstoppable Domains | Unstoppable Domains," offering no indication of the targeted brand or service and suggesting a placeholder page rather than a crafted clone. The domain appears on three independent blocklists—PhishDestroy, MetaMask, and SEAL—demonstrating that multiple security vendors have flagged it as malicious. VirusTotal analysis shows that 1 of 93 scanning engines flagged the domain, providing additional corroboration of its malicious nature.

Because the site is offline, active threat behavior cannot be observed, and the exact phishing payload or landing page content remains unknown. Defenders should continue to block the domain at perimeter filters, update endpoint protection signatures to include the listed blocklist entries, and monitor for any future re‑registration of the same second‑level domain or related subdomains. Network traffic to the IP 34.42.100.71 should be scrutinized for any residual communications, and any internal users who may have previously accessed the domain should be advised to change compromised credentials and enable multi‑factor authentication where possible.