ruleviolation-x[.]com

Analysis of ruleviolation-x.com indicates it was registered on February 23, 2026 through OwnRegistrar, Inc. and is currently taken offline. The domain resolves to IP address 172.67.179.199, which belongs to AS13335 Cloudflare, Inc. in the United States. No SSL certificate is presented for the host, and the HTTP service has been observed as inactive at the time of analysis. The page title returned from the site is "X.

It’s what’s happening / X," providing no direct indication of the targeted brand or service. The threat classification is identified as Social Media Phishing, consistent with the generic phishing type reported. VirusTotal scanning recorded a single positive detection out of 93 security vendors, confirming at least one vendor flagged the domain as malicious. The domain appears on three public security blocklists and is explicitly blocked by PhishDestroy, MetaMask, and SEAL.

Nameservers listed are agustin.ns.cloudflare.com and null wanda.ns.cloudflare.com, both under Cloudflare’s infrastructure. Defenders should add ruleviolation-x.com to internal blocklists, monitor traffic to the associated Cloudflare IP for any residual activity, and ensure that any user‑generated content referencing the page title is scrutinized for possible lure attempts. Given the limited visibility beyond the single vendor flag and blocklist entries, further observation is advised should the domain return online, with re‑evaluation of detection scores and potential inclusion in threat‑intel feeds.