suggesting-x[.]com

suggesting-x.com has been flagged for Fake Login Phishing by PhishDestroy’s live threat intelligence pipeline using seed d5b55b. This domain is actively resolving to IP 188.114.96.3 and is under live investigation for mimicking legitimate login portals to steal usernames and passwords. The risk level is currently Under Investigation, but early indicators point to a high-certainty credential harvesting campaign targeting unsuspecting users.

This domain was registered on April 04, 2026 through DYNADOT LLC, a domain registrar that allows rapid domain spin-up with minimal identity verification. It resolves to IP 188.114.96.3, which is hosted on a shared cloud block known for short-lived malicious campaigns. VirusTotal currently shows a clean scan of 4 out of 95 security engines, indicating it has not yet been widely blacklisted, although this is expected to change rapidly as reports escalate. The domain uses a Let’s Encrypt SSL certificate, which is automatically issued and does not indicate legitimate ownership or enhanced security. There are currently no entries on major public blocklists such as Google Safe Browsing, PhishTank, OpenPhish, or URLVoid, but dynamic feeds from threat intel partners have already flagged the domain via seed d5b55b.

Given the Fake Login Phishing threat, users should immediately avoid interacting with suggesting-x.com and treat any login prompts or forms on the site as malicious. Do not enter usernames, passwords, or any sensitive information. If you have already entered credentials, change your password immediately on legitimate platforms and enable multi-factor authentication. Report the domain to your browser vendor or security tool using the IP and domain details. Consider blocking 188.114.96.3 at the network level if possible. Always verify URLs manually—especially after clicking shortened links—and use password managers that warn of fake login pages. Monitor accounts for unusual activity if any data was entered.