x-net[.]app

PhishDestroy identifies x-net.app as an active phishing domain under investigation for hosting a counterfeit login portal designed to harvest user credentials. The threat type is classified as generic_phishing, indicating a high likelihood of impersonation attacks targeting unsuspecting users. The risk level remains under_investigation due to ongoing analysis, but the domain’s recent creation and infrastructure choices suggest elevated malicious intent. Users should exercise extreme caution and avoid interacting with this domain entirely.

This domain was flagged with 0 detections out of 95 on VirusTotal, indicating it has not yet been widely recognized as malicious by antivirus engines. It was registered through Tucows Domains Inc and resolves to IP address 104.21.83.172, which is hosted within Cloudflare’s infrastructure. The domain was created on March 31, 2026, a suspiciously recent date that aligns with the rapid deployment of phishing campaigns. Despite the use of a Let's Encrypt SSL certificate, which may lend false legitimacy, no trustworthy reputation or blocklist entries were detected at the time of analysis.

To mitigate exposure to this phishing threat, users should immediately block x-net.app at the network or DNS level. Avoid clicking any links referencing this domain in emails, messages, or websites. If credentials were entered, change passwords immediately and enable multi-factor authentication on all related accounts. Report the domain to your email provider and cybersecurity team. Organizations should monitor outbound connections to 104.21.83.172 for signs of credential exfiltration. Always verify URLs before entering sensitive information and rely on official, bookmarked websites for authentication.