xapp-inline105003[.]com

On July 29, 2026 the domain xapp-inline105003.com was identified as an active generic phishing infrastructure with an elevated risk rating. The domain was registered on June 05, 2026 through Ascio Technologies, Inc. Danmark – a subsidiary of Ascio Technologies, Inc. USA, and is served by the Netcup nameservers root-dns.netcup.net, second-dns.netcup.net and third-dns.netcup.net. DNS resolution points to the IPv4 address 89.58.21.46, which is currently listed on a single security blocklist and has been blocked by the PhishDestroy service. VirusTotal analysis shows that 19 of 91 scanned security vendors have flagged the domain as malicious, indicating a consensus among a subset of scanners.

The domain appears on only one public blocklist, suggesting limited but targeted detection coverage. No public SSL certificate, HTTP response code, page title, or Safe Browsing verdict has been disclosed, so the presence of HTTPS or web content characteristics remains unverified. The lack of additional telemetry such as OTX references or external reputation scores limits the visibility of broader campaign activity.

Defensive operators should add the IP address 89.58.21.46 and the fully qualified domain name to deny lists, enforce outbound DNS filtering for the Netcup nameservers, and monitor for any future detections from the 19 vendors that reported malicious behavior. Ongoing observation of the domain’s registration status and any changes to its hosting infrastructure is recommended to assess potential escalation. Until further evidence emerges, the domain should be treated as a confirmed phishing source and blocked at network perimeter and endpoint controls.