reported-x[.]com

Domain reported-x.com is a confirmed generic phishing site designed to impersonate the X (formerly Twitter) platform. The site's page title resolved to x.com/, indicating a direct attempt to spoof the legitimate login page. No specific drainer kit was identified, but the site was configured to capture credentials through a fraudulent interface.

Technical analysis reveals the domain was created on February 23, 2026, and registered through Hello Internet Corp. VirusTotal detection shows 1 out of 95 security vendors flag the domain as malicious. The domain appears on 3 security blocklists and is currently blocked by multiple security platforms including MetaMask, SEAL, and PhishDestroy. Infrastructure analysis shows the domain resolves to IP address 188.114.97.3, which is associated with Cloudflare's CDN network, a common obfuscation technique used by phishing operators to hide origin servers.

The domain is currently offline and has been taken down. However, residual risk remains as threat actors may repurpose the same infrastructure under different domains. Security recommendations include monitoring for similar domains registered through Hello Internet Corp, blocking IP 188.114.97.3 at the network level, and ensuring users verify website URLs before entering credentials. Users who interacted with this site should immediately change their X account passwords and enable two-factor authentication.