point[.]mon-l1[.]com

The domain point.mon-l1.com is a phishing site engaged in brand impersonation targeting Twitter (now X). It was designed to deceive users into believing they were interacting with the legitimate Twitter platform, likely to harvest login credentials or other sensitive information. No crypto drainer kit was observed. The site is currently taken offline, but its prior activity poses an elevated risk to users who may have engaged with it.

Point.mon-l1.com was flagged by 2 of 95 security vendors on VirusTotal, including ChainPatrol and SOCRadar, and appears on 1 security blocklist (PhishDestroy). The domain was registered through Tucows Domains Inc. on October 16, 2025, and resolves to the IP address 172.67.155.246, hosted on Cloudflare's network (AS13335). No SSL certificate was issued for the domain, and the observed page title was 'Invite Code Not Found'. The HTTP status returned was 429, and the nameservers are kyrie.ns.cloudflare.com and may.ns.cloudflare.com. Gridinsoft assigned a trust score of 0/100 to the domain.

Users who interacted with point.mon-l1.com should immediately change their Twitter passwords and enable two-factor authentication (2FA) to secure their accounts. Monitor for unauthorized activity, such as unexpected posts or messages sent from the account. Report the phishing domain to Twitter’s support team and consider submitting it to additional threat intelligence platforms like PhishTank or Google Safe Browsing. If financial or personal data was entered, watch for signs of fraud or identity theft.