safetyviolation-x[.]com

The domain safetyviolation-x.com was taken offline as of the reporting date but continues to resolve to the IPv4 address 84.32.84.32. The address belongs to the Hostinger International Limited network (ASN 47583) and is geolocated to Lithuania. DNS resolution is provided by ns1.dns-parking.com and ns2.dns-parking.com, and the HTTP response returns a generic parking page with the title “Parked Domain name on Hostinger DNS system”. No TLS certificate is presented, indicating that the site does not support encrypted connections. The domain was registered on 23 February 2026 through Hostinger operations, UAB.

Security telemetry identifies the domain as a social‑media phishing vector. VirusTotal analysis recorded a single positive detection out of ninety‑three scanning engines, and the domain is listed on three independent blocklists. It is actively blocked by PhishDestroy, MetaMask, and the SEAL consortium, reinforcing the assessment that the domain has been used in phishing campaigns targeting social‑media credentials. The available evidence stops at the infrastructure layer; no payload, landing page content, or credential‑harvesting URLs have been captured. Consequently, the exact phishing lures, target user demographics, and campaign scale remain uncertain.

Absence of SSL and the presence of a parked page suggest that the domain may have been used briefly before being seized or abandoned, or that it is awaiting further configuration. Defenders should continue to deny any network traffic to safetyviolation-x.com and to its resolving IP 84.32.84.32. Adding the domain and its IP range to perimeter firewalls, proxy filters, and DNS‑based blocklists will prevent accidental user exposure. Monitoring for future DNS changes or re‑activation of the domain is advisable, as the same hosting infrastructure is commonly reused for new phishing campaigns. Correlation with the single VirusTotal positive detection may provide additional indicator context for threat‑intel platforms.