app-sovryn[.]com

app-sovryn.com is a generic phishing domain that was taken offline after being flagged for malicious activity. It does not impersonate a known brand or deploy a drainer kit, but its design and behavior indicate a phishing attempt targeting users who may expect a legitimate service. The domain currently shows a 'Just a moment...' page and returns an HTTP 429 status, suggesting rate limiting or blocking. Its elevated risk level stems from multiple security blocklists and a low trust score, making it unsafe for interaction.

Technical indicators for app-sovryn.com include detection by 2 of 95 VirusTotal vendors (Gridinsoft and Seclookup), with a Gridinsoft trust score of 0/100. The domain is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, created on September 12, 2025, and resolves to IP address 104.21.56.221 in the US, hosted by Cloudflare (AS13335). It appears on 4 security blocklists: PhishDestroy, Polkadot, Enkrypt, and Codeesura. Google Safe Browsing did not flag the domain, but the SSL certificate is issued by WE1. These indicators confirm the domain's malicious nature despite low vendor detection.

Users who interacted with app-sovryn.com should take immediate safety steps. Since this is generic phishing without a drainer kit, the primary risk is credential theft from any login forms. Change passwords for any accounts used on the domain, enable two-factor authentication (2FA) on those accounts, and monitor for unauthorized access or fraud. Report the domain to your email provider, security tools, and blocklist services like PhishDestroy to help protect others. Avoid revisiting the domain even though it is offline, as it may be reactivated.