checkportal-x[.]com

Analysis of checkportal-x.com indicates a domain previously associated with social media phishing activity, now offline as of July 23, 2026. The domain was registered on February 23, 2026, through HOSTINGER operations, UAB, and was hosted on IP address 84.32.84.32, located in Lithuania under AS47583 (Hostinger International Limited). No SSL certificate was detected for this domain, and its nameservers (ns1.dns-parking.com, ns2.dns-parking.com) suggest a parking or low-interaction hosting configuration. The page title, 'Parked Domain name on Hostinger DNS system,' further supports this observation, though it does not confirm the domain's operational state during its active period.

The domain appears on three security blocklists and is explicitly blocked by PhishDestroy, MetaMask, and SEAL, indicating prior malicious classification. AlienVault OTX includes checkportal-x.com in one threat intelligence pulse, though specific campaign details or targeting remain unconfirmed. Scamadviser assigns a trust score of 1 out of 100, reflecting high-risk indicators. While VirusTotal records a single detection from 93 security vendors, this limited visibility does not rule out broader recognition by other security tools or private feeds.

Infrastructure analysis reveals no direct ties to known phishing kits or branded impersonation, though the 'Social Media Phishing' classification suggests credential harvesting or fraudulent account access attempts. The domain's current offline status limits further forensic analysis, but defenders should treat any prior resolution to 84.32.84.32 or association with the listed nameservers as potential indicators of compromise. Organizations are advised to monitor for re-registration or re-emergence under similar naming conventions, particularly those mimicking portal or authentication services. No evidence links this domain to broader campaign infrastructure at this time.