legalreview-x[.]com
“Parked Domain name on Hostinger DNS system”
legalreview-x.com — 内容不可用. 品牌冒充:Wordpress; 诈骗类型:Social Media Phishing. 证据摘要: VirusTotal 1/93 (SOCRadar); 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 66/100. 注册商: Hostinger.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
Analysis indicates that legalreview-x.com was registered on 23 February 2026 through Hostinger operations UAB. The domain resolves to IP 84.32.84.32, which is allocated to AS47583 Hostinger International Limited and geolocated to Lithuania. No TLS certificate is presented; the site is reachable only via HTTP and currently returns an offline status. The authoritative nameservers are ns1.dns-parking.com and ns2.dns-parking.com, which are typical of parked domains on Hostinger’s DNS infrastructure. The page title returned from the HTTP response is “Parked Domain name on Hostinger DNS system”, providing no functional content beyond a parking placeholder.
Threat intelligence classifies the domain as a social‑media phishing vector. VirusTotal reports a single positive detection out of 93 scanned engines, and three independent blocklists – PhishDestroy, MetaMask, and SEAL – have listed the domain as malicious. In addition, the domain appears on three other security blocklists, reinforcing the suspicion of abuse. No SSL/TLS certificate, no legitimate content, and the presence of a generic parking page are consistent with a fast‑flux or temporary phishing infrastructure that leverages newly registered domains. Uncertainties remain regarding the specific phishing campaign, such as the targeted social‑media platforms or the exact payload delivered to victims, because no page content beyond the parking placeholder has been observed.
The lack of additional detections beyond the single VirusTotal flag may reflect limited exposure or recent takedown. Defenders should continue to block legalreview-x.com at the network perimeter and DNS resolution layers, monitor for any resurgence of activity from the associated IP address, and consider adding the domain to internal blocklists. Threat hunting should include correlation of recent social‑media phishing reports with the registration timestamp and hosting provider, as adversaries frequently reuse Hostinger‑based infrastructure.
威胁响应 Pipeline
公共封禁名单状态
已保存的截图
域名情报
技术细节DNS、SSL SAN、时间戳
ICANN OVERSIGHT
认证和 RAA 背景
认证和 RAA 背景
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
VirusTotal 分析
证据与外部报告
PD-20260223-CB95CB Recipient: abuse-tracker@hostinger.com 您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。