x-secured-redirect[.]com

Analysis of x-secured-redirect.com shows a newly registered domain (created June 21, 2026) that is currently active and associated with credential phishing activity. The domain resolves to IP 104.21.29.150, an address owned by Cloudflare (AS13335) and located in the United States. DNS resolution uses Cloudflare nameservers blair.ns.cloudflare.com and cash.ns.cloudflare.com, and the site enforces HSTS while supporting HTTP/3. An HTTP request returns a 302 redirect, a common technique for forwarding victims to credential‑harvesting pages. The SSL certificate is issued by Google Trust Services under the WE1 name, indicating a valid TLS chain but offering no protection against malicious use. Reputation data shows the domain appears on three security blocklists, including PhishDestroy, MetaMask, and SEAL, and six of ninety‑one VirusTotal scanners have flagged it. Gridinsoft assigns a trust score of 0/100, reinforcing the high‑risk assessment. Registration details list NICENIC INTERNATIONAL GROUP CO., LIMITED as the registrar. While the exact phishing landing page has not been publicly disclosed, the combination of recent creation, redirection behavior, blocklist presence, and low trust score suggests active credential‑phishing infrastructure. Defenders should block or monitor DNS queries for this domain, enforce outbound web filtering, and treat any traffic to the URL as malicious. Continuous observation is recommended to capture potential payloads or credential‑stealing forms that may appear later.