x500[.]com

The domain x500.com is currently classified as a high‑risk generic phishing indicator. It was first observed on July 12, 2026 and remains active. Threat intelligence sources have recorded the domain in one AlienVault OTX pulse and three of ninety‑five VirusTotal scanners have raised detections, confirming its malicious reputation. Network analysis shows that x500.com resolves exclusively to the address 15.197.148.33, which is hosted in the United States under an AWS Global Accelerator endpoint. The host is listed on a single security blocklist and the site presents a valid SSL certificate issued by GoDaddy.com, Inc. through the Go Daddy Secure Certificate Authority – G2. Despite the valid certificate, the Gridinsoft trust score is 0 out of 100, and HTTP requests return a 200 status code, indicating an operational web service. The domain was registered on April 24, 2026 via GoDaddy.com, LLC, using the authoritative name servers ns01.domaincontrol.com and ns02.domaincontrol.com. Its recent creation date aligns with the rapid emergence of the malicious activity. PhishDestroy has already blocked the domain, yet it continues to resolve and serve content, suggesting that mitigation efforts have not fully disrupted the infrastructure. Defenders should immediately add x500.com and its associated IP 15.197.148.33 to deny‑list rules across perimeter firewalls, DNS filtering, and endpoint protection platforms. Continuous monitoring of the GoDaddy name server range is advised to detect any future re‑registration attempts. Correlating internal logs for connections to the IP address or TLS handshakes with the Go Daddy Secure Certificate Authority – G2 can help identify compromised hosts. Given the low trust score and active status, organizations are encouraged to treat any traffic to this domain as malicious and to educate users about the ongoing generic phishing campaign.