tsq[.]xqj[.]mybluehost[.]me

The domain tsq.xqj.mybluehost.me is currently classified as a high‑risk generic phishing resource and remains active as of 12 July 2026. Infrastructure analysis shows it is hosted on IP 69.6.192.27, which resolves to an Autonomous System (AS31898) registered to Oracle Corporation in Spain (ES). The domain uses the authoritative name servers ns1.mybluehost.me and ns2.mybluehost.me and was originally registered on 05 October 2016 through Domain.com – Network Solutions, LLC. TLS termination is provided by a Sectigo Limited / Sectigo Public Server Authentication CA DV R36 certificate, and HTTP requests to the site return a 302 redirect. The page title observed is "Welcome — Próximamente," but no further content has been publicly disclosed. Threat intelligence indicates the domain appears on two phishing blocklists (PhishDestroy and PhishingDB) and 15 of 95 VirusTotal scanners have flagged it as malicious. Given the confirmed phishing classification, the high risk rating, and the active status, defenders should prioritize adding the domain and its associated IP address to outbound and inbound block lists, employ sinkholing where appropriate, and monitor for any related command‑and‑control traffic. Continuous re‑evaluation is advised as additional payload or credential‑harvesting activity may emerge.