xtqesbiw[.]help

The domain xtqesbiw.help is a phishing site, flagged by 3 out of 95 vendors on VirusTotal. It was first detected by PhishDestroy in October 2025. Despite its current offline status, its malicious intent was evident from its brief period of activity. The domain was registered with NameSilo, LLC, and hosted by Cloudflare, Inc., with an IP address located in the United States.

The site displayed a 403 Forbidden page, indicating restricted access, which is a common tactic used by phishing sites to avoid detection while they are active. With no SSL certificate issued, the site lacked basic security measures, which is often a red flag for phishing operations. The domain was created on September 29, 2025, suggesting a short operational window before being taken offline.

PhishDestroy's detection of this domain highlights the importance of early identification of phishing threats. The domain's presence on one public blocklist, specifically PhishDestroy's, underscores its recognized threat level during its active period. The use of Cloudflare's infrastructure for hosting further emphasizes the need for vigilance, as legitimate services can be exploited by malicious actors. The swift takedown of xtqesbiw.help reduces its potential impact, but its initial detection serves as a reminder of the ongoing threat posed by phishing domains.