x-portfolio[.]live

This domain, x-portfolio.live, was registered on 22 April 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com and is hosted behind Cloudflare (IP 188.114.97.3, CA). The authoritative nameservers are marvin.ns.cloudflare.com and katja.ns.cloudflare.com, and the site presents a valid Google Trust Services / WE1 TLS certificate. Automated scans show an HTTP 403 response and a page title of “Just a moment…”, indicating that the front‑end is deliberately obscured. Reputation data is poor: Gridinsoft assigns a trust score of 0 / 100, the domain appears on one external blocklist, and PhishDestroy has already blocked it. VirusTotal records a single positive detection out of 94 scanners, and AlienVault OTX lists the domain in one threat‑intel pulse. These indicators collectively confirm that the infrastructure is being used for malicious activity, most likely a phishing campaign, although the exact payload and target audience have not been publicly disclosed. Defenders should immediately add x-portfolio.live to URL filtering and DNS sinkhole rules, monitor outbound connections to its Cloudflare IP, and correlate any authentication attempts against the domain with internal logs. Continuous re‑scanning is advised to capture any changes in the site’s behavior, and threat‑intel feeds should be queried for new indicators of compromise linked to the observed IP address or certificate.