scottytheai[.]free[.]nf

The domain scottytheai.free.nf is a phishing site that engages in brand impersonation, specifically mimicking WordPress. The site was observed to have a page title 'Scotty theai – My WordPress Blog', which suggests it was designed to deceive visitors into believing it is a legitimate WordPress blog. The domain is currently taken offline, reducing the immediate risk it poses.

The domain scottytheai.free.nf was registered through Key-Systems GmbH on June 14, 2023. It resolves to the IP address 185.27.134.232, which is located in the United Kingdom and is part of the AS34119 Wildcard UK Limited network. The SSL certificate for the domain is issued by ZeroSSL / ZeroSSL ECC Domain Secure Site CA. According to VirusTotal, 1 of 95 security vendors flags this domain as malicious, and it appears on 1 security blocklist, specifically PhishDestroy. The site uses Nginx and OpenResty technologies.

If a user has interacted with scottytheai.free.nf, they should take immediate steps to protect their accounts and personal information. For credential or login phishing, users should change their passwords, enable two-factor authentication, and monitor their accounts for any unauthorized activity. It is also recommended to report the phishing site to the impersonated brand, WordPress, and to the relevant authorities such as the Anti-Phishing Working Group (APWG) or local law enforcement. Users should avoid clicking on links or entering personal information on any site that appears suspicious or unverified.