reviewrights-x[.]com

Analysis of reviewrights-x.com, created on 23 February 2026, shows infrastructure consistent with a Squarespace‑hosted phishing campaign targeting social‑media users. The domain resolves to 198.185.159.144, an address owned by AS53831 Squarespace, Inc., located in the United States. DNS is served by Google Domains name servers ns‑cloud‑b1.googledomains.com, ns‑cloud‑b2.googledomains.com, and ns‑cloud‑b3.googledomains.com, confirming the use of a reputable third‑party registrar. A valid TLS certificate issued by Let’s Encrypt (R12) is present, and the site enforces HTTP Strict Transport Security, which can lend a false sense of legitimacy.

The HTTP response returns status code 200 and the only observable page element is the title “Coming Soon”, indicating that the landing page is either under construction or deliberately minimal to avoid content‑based detection. Automated scanning on VirusTotal recorded a single positive detection out of 93 vendors, and the domain received a Gridinsoft trust score of 0 / 100, reflecting extreme suspicion. It is listed on three public blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL. The registrar information lists Squarespace Domains II LLC as the registrant, a common choice for abuse actors leveraging the platform’s ease of deployment.

While the site is currently offline, the elevated risk rating suggests that the infrastructure may be reused for future campaigns. Defenders should add the domain and its associated IP address to inbound and outbound filtering rules, monitor the listed name servers for rapid re‑registration, and enforce strict verification of any communications that reference “reviewrights” or similar branding. Because the observed page content is limited to a placeholder title, further content‑level analysis is not possible until the site is re‑activated. Continuous observation of the certificate renewal and DNS changes is recommended to detect potential re‑use.