recently-x[.]com

PhishDestroy identifies recently-x.com as a generic phishing domain actively distributing fake login portals to harvest user credentials. The domain poses an immediate threat to individuals accessing the site, as it is designed to mimic real authentication pages. As of the latest intelligence, the domain remains in active status with no confirmed takedown or remediation efforts. Recently-x.com was registered on April 09, 2026 through Dynadot Inc and resolves to IP 172.67.156.196. The domain utilizes a Let’s Encrypt SSL certificate and has evaded detection, remaining flagged by 3 of 95 VirusTotal vendors as of the analysis timestamp. This low detection rate, combined with the domain’s recent creation and lack of historical trust data, indicates a potentially emerging and rapidly evolving phishing campaign. Security researchers and end users are advised to treat recently-x.com as a confirmed threat vector and avoid all interactions. The domain should be added to network blocklists and endpoint security solutions immediately. Users who may have entered credentials on this site are urged to change passwords systemically and enable multi-factor authentication on all affected accounts. Security teams should monitor for associated IP ranges and monitor for follow-on credential abuse attempts.