formentry-x[.]com

Retained for the record. This text repeats stored detection facts and is not presented as authored analysis.

The domain formentry-x.com is identified as a Social Media Phishing vector. It was registered on 23 February 2026 through Hostinger operations, UAB, and the registration details are publicly visible. The domain resolves to the IPv4 address 84.32.84.32, which is announced by AS47583 Hostinger International Limited and geolocated to Lithuania. Authoritative name servers are ns1.dns-parking.com and ns2.dns-parking.com, and no TLS certificate is presented, indicating the site does not serve HTTPS traffic. The only HTTP response observed is a generic parked‑domain page whose title reads “Parked Domain name on Hostinger DNS system”.

The domain is currently taken offline, and no active content has been captured. Despite the lack of a live payload, the domain appears on three independent security blocklists and has been flagged by one of ninety‑three vendors on VirusTotal, demonstrating that security tooling has associated it with malicious activity. The presence of a registrar tied to a popular hosting provider, combined with the blocklist listings and the vendor detection, suggests that the domain was either prepared for or briefly used in a phishing campaign targeting social‑media accounts. However, the exact phishing page, lure content, or credential‑harvesting mechanism has not been observed, leaving the specific attack flow uncertain.

Defenders should proactively block both the domain name and its resolving IP address at perimeter and DNS filters. Continuous monitoring of the domain’s DNS records is advised to detect any re‑activation or redirection to malicious content. Adding the domain to internal threat‑intel feeds and sharing the indicator set with partner organizations can help prevent reuse. Given the hosting environment, any future domains created under the same registrar or IP range should be scrutinized for similar blocklist activity.