flagged-x[.]com

flagged-x.com was observed resolving to the IPv4 address 188.114.96.3, which is hosted within Cloudflare’s AS13335 network in the United States. The domain was registered on February 23, 2026 through Hello Internet Corp and is served by the Cloudflare authoritative nameservers simon.ns.cloudflare.com and surina.ns.cloudflare.com. No TLS certificate was presented, indicating that the site operated without HTTPS protection. The page title returned by the HTTP response is "x.com/", and the intelligence classification identifies the activity as a social media phishing campaign.

VirusTotal analysis recorded a single positive detection out of 93 scanned security vendors, confirming that at least one vendor flagged the domain as malicious. The domain appears on three independent blocklists and has been explicitly blocked by the PhishDestroy, MetaMask, and SEAL filtering services. As of the report date, the site is reported as taken offline, and no further HTTP status codes are available.

Evidence gaps remain regarding the exact payload delivered, the phishing kit employed, and any victim interaction logs, as no additional content analysis has been published. Defenders should continue to block traffic to 188.114.96.3 and add flagged-x.com to local deny lists, monitor for any resurgence of the domain or associated IP ranges, and consider reviewing related Cloudflare‑hosted domains that share the same nameserver configuration. Ongoing vigilance is advised given the recent creation date and the active blocklist presence.