t-mobile[.]hxqnr[.]icu

This domain, t-mobile.hxqnr.icu, carries an elevated risk level as a brand impersonation threat specifically targeting x.com. The domain was created on December 5, 2025, and is currently offline, but its registration through Gname.com Pte. Ltd. and resolution to IP 104.21.10.14 raise serious concerns. An alarming 15 out of 95 security vendors on VirusTotal flag this domain as malicious, and it already appears on one security blocklist, indicating recognized malicious activity.

The domain's page title, "Welcome to nginx!", is a common default that offers no legitimate content, further suggesting it was set up for deceptive purposes. The absence of an SSL certificate is a critical red flag, as legitimate sites handling sensitive information always encrypt traffic. With no HTTPS present, any data transmitted would be vulnerable to interception. These technical indicators, combined with the brand impersonation of a major platform like x.com, underscore the domain's malicious intent.

To protect against this brand impersonation threat, users should avoid visiting the domain entirely and never enter any personal or sensitive information on such sites. PhishDestroy recommends reporting the domain to browser security features and blocking it at the DNS level if possible. Organizations should also educate employees to verify URLs carefully, especially those mimicking well-known brands like x.com. Since the domain is offline now, it may be temporarily inactive, but vigilance is advised as similar domains could reappear.