app-ostium[.]xyz

The domain app-ostium.xyz was registered on 27 February 2026 through Go Daddy, LLC and is currently active. Its page title, as observed, reads “Mobile App Privacy and Permissions | .Software”, indicating a possible lure related to mobile applications. The site returns HTTP 200 and is hosted on IP 23.216.132.65. Infrastructure analysis shows the IP belongs to AS20940 operated by Akamai International B.V., located in the United States. The web server stack consists of Nginx with OpenResty, and the TLS certificate is issued by GoDaddy.com, Inc. under the Go Daddy Secure Certificate Authority – G2. Authoritative name servers are ns49.domaincontrol.com and ns50.domaincontrol.com. Threat intelligence flags this domain as a high‑risk generic phishing site. VirusTotal records indicate that 2 of 95 scanned security vendors have flagged the domain, and it appears on one external blocklist (PhishDestroy). The limited vendor detection suggests the payload may be evasive or still in early distribution, but the combination of a recent registration, active hosting, and a privacy‑oriented page title aligns with typical credential‑ harvesting campaigns. Defenders should treat app-ostium.xyz as hostile. Immediate mitigation includes adding the domain and its resolving IP to network deny lists, configuring URL filtering to block any HTTP/HTTPS requests, and monitoring DNS logs for lookup spikes. Continuous re‑evaluation is advised, as additional detections or content analysis could refine the threat profile.