axiomfocus[.]app

The domain axiomfocus.app has been identified as a generic phishing threat, currently classified with an elevated risk level and marked as offline. This domain, which impersonates the brand Axiom as a focus and productivity app, was created on February 21, 2026, and registered through NiceNIC International Group Co., Limited. PhishDestroy's analysis reveals that the site was designed to deceive users into providing sensitive information, potentially leading to credential theft or other malicious activities.

Technical indicators further underscore the domain's suspicious nature. VirusTotal flagged it with 2 out of 95 security vendors, while it also appears on one security blocklist. The domain resolves to IP address 172.67.223.29 and holds an SSL certificate issued by Google Trust Services / WE1, which may have contributed to a false sense of legitimacy. Despite being taken offline, the domain's registration details and low blocklist count suggest it could be reactivated or repurposed for future attacks. The use of a Chinese registrar and an IP associated with Cloudflare adds to the risk profile, as these are common in phishing campaigns.

Given these findings, users and organizations should treat axiomfocus.app as a confirmed phishing threat. Even though the domain is currently offline, it is advisable to block it at the network level and monitor for any new domains with similar patterns. Users who may have interacted with this site should change their passwords and monitor accounts for suspicious activity. PhishDestroy recommends implementing DNS filtering and educating users to recognize generic phishing indicators, such as domain age and mismatched brand URLs, to prevent future incidents.