outdesk[.]app

The domain outdesk.app was registered on 21 February 2026 through NiceNIC International Group Co., Limited and is currently pointing to the IP address 185.197.182.32. The address resolves to Germany and is announced by ASN 51396 (Pfcloud UG). DNS resolution is served by two Cloudflare name‑servers, chelsea.ns.cloudflare.com and steven.ns.cloudflare.com. No TLS certificate is presented, and HTTP requests receive a 302 redirect response. The landing page reports the title “SMARTDESK ‑ CRM”, which suggests a credential‑collection site targeting users of a CRM product, but the content of the page has not been publicly disclosed.

Three of ninety‑three VirusTotal scanners have flagged the domain as malicious, and it appears on a single external blocklist that is currently enforced by the PhishDestroy service. Its risk rating is classified as high and the operational status is listed as active. The limited detection footprint—only three vendor detections and one blocklist entry—indicates that the site may be newly deployed or using evasion techniques that avoid broader detection. At present, the concrete malicious behavior observed is limited to the redirection and the absence of transport‑layer encryption, which are common tactics for credential‑harvesting sites.

Defenders should block outbound connections to 185.197.182.32 and add outdesk.app to URL filtering policies. Monitoring of DNS queries for the Cloudflare name‑servers associated with this domain can provide early warning of future infrastructure changes. Because the page title references “SMARTDESK”, organizations using that brand should treat any unsolicited login prompts from this domain as suspicious. Continuous re‑evaluation is recommended as additional threat‑intel sources may update the detection count or blocklist presence.