standx[.]app

The domain standx.app was registered on 21 February 2026 through Porkbun LLC. Its authoritative name servers are curitiba.ns.porkbun.com, fortaleza.ns.porkbun.com, and maceio.ns.porkbun.com. DNS resolution points to the IPv4 address 147.93.78.122, which belongs to AS47583 Hostinger International Limited and is geolocated in Singapore. An HTTP GET returns status code 200 and the page title is reported as “Bot Verification”. The site presents an SSL certificate labeled WR1, indicating that TLS is in use but providing no further validation of the certificate authority. VirusTotal analysis shows that one out of ninety‑three scanning engines flagged the domain, and the domain is listed on four public blocklists.

It is explicitly blocked by PhishDestroy, Polkadot, Enkrypt, and Codeesura. Gridinsoft assigns a trust score of 0 out of 100, reinforcing the malicious classification. The overall risk rating is elevated. These indicators collectively point to a generic phishing operation. The “Bot Verification” title suggests the site may be used to harvest credentials or to route automated traffic through a verification step, a pattern commonly observed in credential‑stealing campaigns.

The presence of a valid TLS certificate does not mitigate the threat, as attackers frequently obtain certificates for malicious sites to evade naïve heuristics. The current offline status prevents direct content inspection, so the exact payload and any targeted brand cannot be confirmed. Defenders should continue to block traffic to standx.app and its hosting IP 147.93.78.122 at the network perimeter, add the domain to URL filtering rules, and monitor for any newly resolved subdomains or similar name‑server configurations. Given the recent registration date, threat actors may reuse the same registrar or hosting provider for future campaigns, so vigilance on new domains created by Porkbun and hosted on AS47583 is advised.