app[.]v1-dyxd[.]net

This domain, app.v1-dyxd.net, is currently flagged as a generic phishing threat and is under active investigation as of August 03, 2026. The domain is live and operational, indicating that any associated campaign may still be active. The primary indicator of malicious activity is its inclusion on one security blocklist, specifically PhishDestroy, which has categorized it as a phishing risk. This blocklist presence is the core evidence supporting the current threat assessment.

VirusTotal data shows that the domain was scanned by 91 vendors, yet none of them currently flag it as malicious. This lack of detections is notable but not conclusive; it does not prove the domain is safe, as evasion techniques or delayed analysis can result in zero vendor flags. Defenders should treat this as an inconclusive signal rather than a clean bill of health.

The exact nature of the phishing campaign remains unverified. No page title, brand target, or specific scam kit has been identified in the available intelligence, so the precise content or lure used on the domain is not yet analyzed. Infrastructure details such as registrar, hosting provider, IP address, SSL certificate status, and HTTP response codes are absent from the current data and cannot be reported.

For defenders, the recommended course of action is to treat this domain as a potential threat. Block access at the network or DNS level, monitor logs for any attempted connections, and review email or web traffic for references to this domain. Given the live status and blocklist confirmation, proactive blocking is advised. Re-check VirusTotal and blocklist sources periodically, as new detections may emerge. If the domain is observed in phishing emails or credential-harvesting pages, additional indicators such as associated IPs or sibling domains should be collected for broader threat hunting.