compromised-x[.]com

This domain is flagged as a high-risk generic phishing threat and remains active as of July 12, 2026. Registered on May 23, 2026 through Dynadot Inc, it resolves to IP 104.21.40.75 and uses a Let's Encrypt SSL certificate. Infrastructure analysis reveals technologies including YouTube, Apache Traffic Server, HSTS, Cloudflare Browser Insights, and HTTP/3, which collectively suggest the domain may be hosting embedded content or a redirect chain. The page title points to a legitimate YouTube video, which could indicate the domain is used for redirect cloaking or serving a decoy page to evade detection. Gridinsoft trust score is 0/100, and it appears on 4 security blocklists. VirusTotal shows 10 of 95 security vendors flagging the domain, and AlienVault OTX lists it in 16 threat intelligence pulses. It is blocked by SEAL, MetaMask, PhishDestroy, and BLP-Malware. The exact phishing mechanism (e.g., credential harvesting, malware delivery) is not confirmed from available data, and the page content beyond the title has not been analyzed. Defenders should block the domain at the DNS and web gateway levels, monitor for any associated subdomains or IP changes, and investigate the redirect chain to identify the final phishing payload. Given the low trust score, high vendor detection rate, and active status, immediate remediation is recommended.