evolvai[.]app

evolvai.app is currently classified as a generic_phishing site with a high risk rating. The domain was created on February 21, 2026 and remains active as of the report date, July 12, 2026. Initial observations show an HTTP 302 response and a page title of “Category Search”, indicating a redirection behavior typical of phishing infrastructure. Infrastructure analysis reveals that evolvai.app resolves to the IP address 172.234.25.64, which belongs to AS63949 operated by Akamai Connected Cloud and is geolocated in the United States. The domain is hosted on name servers dns1.registrar-servers.com and dns2.registrar-servers.com, both associated with Namecheap Inc. The SSL certificate presented is identified as R11, and the site’s trust metrics are extremely low, with a Gridinsoft score of 0 out of 100. Reputation data shows that 11 out of 95 security vendors on VirusTotal have flagged the domain, and it appears on one public security blocklist. The domain is also listed as blocked by PhishDestroy. These indicators collectively reinforce the malicious classification. While the page title “Category Search” is the only content detail available, no further information about the specific phishing lure, targeted brand, or credential‑collection mechanism has been disclosed. Consequently, the exact tactics employed by the site remain uncertain, and automated content analysis could not confirm the presence of credential‑stealing forms. Defenders should add evolvai.app to network and endpoint deny lists, enforce DNS sinkholing for the associated IP 172.234.25.64, and monitor traffic to the registrar‑provided name servers. Continuous threat‑intel feeds should be consulted for any updates on payload delivery or victim reports, and any observed login attempts to unrelated services should be investigated for credential compromise.