caseinternal-x[.]com

The domain caseinternal-x.com was registered on February 23 2026 through HOSTINGER operations, UAB and immediately pointed to the Hostinger parking infrastructure (ns1.dns-parking.com, ns2.dns-parking.com). DNS resolution returns the single address 84.32.84.32, which belongs to AS47583 Hostinger International Limited located in Lithuania. No TLS certificate is presented; HTTP requests return a generic “Parked Domain name on Hostinger DNS system” title, indicating that the site is not serving any active content.

Threat intelligence classifies the domain as a social‑media phishing vector, and it has been flagged by three independent blocklists—PhishDestroy, MetaMask, and SEAL. VirusTotal analysis shows that one of ninety‑three scanners raised a detection, reinforcing the suspicion of malicious intent. As of the reporting date the domain is marked offline, but the underlying IP and registrar remain active, allowing rapid re‑deployment of malicious pages.

Defenders should continue to block the IP 84.32.84.32 and the domain itself at perimeter filters, add the domain to internal DNS sinkhole lists, and monitor the registrar’s new registrations for similar patterns. Continuous ingestion of the three blocklists and periodic re‑scans of the domain on VirusTotal are recommended to capture any future re‑activation. Given the recent creation date and the presence on multiple phishing‑focused blocklists, the domain should be treated as a high‑confidence indicator of compromise for any organization that uses social‑media authentication flows.