www-rqblox[.]com

This domain, www-rqblox.com, is identified as a brand impersonation threat targeting x.com, a high-profile social media platform. Analysis indicates the domain was actively used for phishing operations but is currently offline. The threat type is classified as brand_impersonation, designed to deceive users into believing they are interacting with legitimate x.com infrastructure. Infrastructure analysis reveals the domain was registered on July 09, 2025, through Web Commerce Communications Limited. It resolves to the IP address 84.200.24.212, hosted under AS214036 (Ultahost, Inc.) in Germany. The domain appears on two security blocklists, including PhishDestroy and PhishingDB. VirusTotal reports indicate 18 out of 95 security vendors flagged this domain as malicious. No SSL certificate was detected, and the page title returned a 403 Forbidden error, suggesting restricted or suspended access. The domain is currently offline, but residual risk remains due to its recent activity and blocklist presence. Organizations are advised to update web filtering rules to block this domain and its associated IP address (84.200.24.212) at the perimeter. Security teams should monitor for any re-emergence of this domain or similar impersonation attempts targeting x.com. End-users should be educated on recognizing brand impersonation tactics, particularly those mimicking social media login pages.