distributions-rekt[.]app

The domain distributions-rekt.app was registered on February 21, 2026 and is currently reported as taken offline. Infrastructure analysis shows the domain resolves to the IP address 188.114.97.3, which is hosted by Cloudflare, Inc. (AS13335) and geolocated to the United States. The TLS certificate presented for the host is identified as WE1, indicating a standard SSL deployment without further validation details.

Reputation data indicates the domain appears on five security blocklists and has been actively blocked by the feed providers PhishDestroy, ScamSniffer, Polkadot, Enkrypt, and Codeesura. VirusTotal records show that four out of ninety-three scanning engines have flagged the domain, reinforcing the likelihood of malicious intent. The combination of blocklist presence, multiple vendor detections, and the short lifespan of the domain suggests an intent to host a phishing campaign, although the site is presently offline, limiting immediate exposure.

Defenders should continue to enforce network controls that deny traffic to 188.114.97.3 and consider adding distributions-rekt.app to local deny lists. Ongoing monitoring of the domain’s DNS resolution and any re‑activation of the site is advised, as threat actors frequently resurrect dormant infrastructure to evade detection. Security operations should also review logs for any historical connections to the IP range associated with Cloudflare to identify potential prior compromise attempts.