legalnotices-x[.]com

Analysis of the domain legalnotices-x.com indicates a high-risk social media phishing operation. The domain, registered on February 23, 2026, through OwnRegistrar, Inc., resolves to IP 103.224.182.252, hosted under AS133618 (Trellian Pty. Limited) in the US. Nameservers ns1.managedns1.com and ns2.managedns1.com are associated with the infrastructure. The SSL certificate is issued by Let's Encrypt (R12), a common choice for both legitimate and malicious domains.

Google Safe Browsing explicitly flags this domain for social engineering, aligning with its classification as a social media phishing threat. The page title, ww25.legalnotices-x.com, suggests a subdomain-based delivery mechanism, though the exact content or targeted platform remains unconfirmed. Security vendors exhibit moderate consensus: 11 of 93 engines on VirusTotal detect the domain as malicious. It appears on three security blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL.

Infrastructure analysis reveals the domain was taken offline by the report date (July 25, 2026), though defenders should treat it as a historical indicator. The Gridinsoft trust score of 0/100 further corroborates its malicious classification. While the specific phishing kit or targeted brand is not identified in available data, the combination of social engineering flags, blocklist presence, and detection rates justifies immediate blocking of the domain and its resolved IP. Network defenders should monitor for related subdomains or newly registered domains under the same nameserver infrastructure.