x-redirect[.]app

Analysis of the domain x-redirect.app, observed as offline on the report date of July 24, 2026, indicates a heightened risk profile consistent with generic phishing activity. The domain is registered through Cloudflare, Inc., and resolves to the IP address 172.67.184.69, which is hosted within the Cloudflare network (AS13335) in the United States. No SSL certificate was found for the domain, suggesting the absence of HTTPS encryption.

Reputation data shows that five out of ninety‑five security vendors on VirusTotal have flagged the domain, reflecting a modest but notable level of detection across independent scanners. Gridinsoft assigned a trust score of zero out of one hundred, and the domain appears on a single security blocklist, reinforcing the suspicion of malicious use. Defensive feeds have recorded the domain as blocked by PhishDestroy, and the domain’s nameservers—earl.ns.cloudflare.com and violet.ns.cloudflare.com—are consistent with its Cloudflare registration.

While the offline status prevents direct observation of payloads or page content, the combination of vendor detections, low trust score, lack of TLS, and blocklist inclusion provides sufficient evidence to classify the domain as a phishing‑related threat. Defenders should continue to block any resolution of x-redirect.app at the network perimeter, monitor for any resurrection of the domain, and update endpoint and URL filtering policies to include the observed IP address and associated hostnames. Uncertainty remains regarding the specific phishing campaign or targeted brand, as no page title or additional content metadata were available for analysis.