contentguides-x[.]com

The domain contentguides-x.com was registered on 23 February 2026 through Atak Domain Bilgi Teknolojileri A.S., which also provides the authoritative name servers eu.atakdomain.com and tr.atakdomain.com. DNS resolution points to the IPv4 address 185.46.40.240, an IP block owned by AS211401 Atak Domain Bilgi Teknolojileri A.S. located in Turkey. The host presents a Sectigo Limited DV certificate issued by the Sectigo Public Server Authentication CA R36, indicating that TLS is correctly configured but offering no evidence of malicious content.

HTTP requests return a simple title “contentguides-x.com | Domain Parked”, suggesting that the site is currently displaying a parking page rather than an active phishing landing page. Nevertheless, analysis on VirusTotal shows that four of ninety‑three scanners flagged the domain, and three independent blocklists (PhishDestroy, MetaMask, SEAL) have listed it as malicious. Gridinsoft assigns a trust score of zero out of one hundred, reinforcing the suspicion. The listed scam type is “Social Media Phishing,” implying that the domain has been used to harvest credentials from platforms such as Facebook, Instagram, or Twitter.

At the time of this report (24 July 2026) the site is marked offline, so active exploitation cannot be confirmed. Defenders should continue to block the domain at perimeter filters, monitor DNS queries for the associated IP and name servers, and consider adding the address 185.46.40.240 to host‑based deny lists. Ongoing observation of any re‑activation or changes to TLS certificates is advised, as well as periodic re‑scans on multi‑engine services to capture new detections.