mindbridgeqatar[.]icu[.]s-italiano[.]store

The domain mindbridgeqatar.icu.s-italiano.store was registered through NameCheap on July 29 2025 and is currently reported as offline with the HTTP response showing the page title “Account Suspended”. DNS resolution points to a single IPv4 address, 45.141.59.165, which is hosted by IP Connect Inc under ASN 213373 and is geolocated to the Netherlands. Both authoritative nameservers, ns1.amsterdam-hosting.to and ns2.amsterdam-hosting.to, resolve to the same hosting provider, indicating a shared‑hosting environment. No TLS certificate is presented, confirming the absence of HTTPS support.

The domain appears on one public blocklist; PhishDestroy has listed it as malicious, and VirusTotal records five detections out of ninety‑five scanners, reinforcing the suspicion of abuse. Intelligence tags the site as a generic phishing campaign that delivers a crypto‑related scam, although the exact payload or lure has not been captured. The combination of recent registration, lack of security controls, and inclusion on a phishing blocklist aligns with the elevated risk rating.

Given the observable indicators, defenders should add the domain and its resolved IP address to outbound and inbound deny lists, enforce DNS sinkholing for the associated nameservers, and monitor network traffic for any connections to 45.141.59.165. Because the site currently returns an “Account Suspended” page, the threat actor may be in a takedown phase, but the infrastructure remains reusable for future campaigns. Continuous re‑scanning on VirusTotal and periodic checks of the blocklist status are advised to capture any changes in the detection landscape.