app-service-v89[.]live

This domain, app-service-v89.live, is currently active and has been classified as a generic phishing site. The web server returns HTTP 502, indicating a bad gateway response, and the site is fronted by Cloudflare with HTTP/3 support. DNS resolution points to IP 188.114.97.3, which belongs to AS13335 Cloudflare, Inc., located in the United States. The TLS certificate is issued by Google Trust Services under the WE1 name, confirming the use of a legitimate certificate authority. The domain was registered on 21 February 2026 through Web Commerce Communications Limited and uses the Cloudflare nameservers demi.ns.cloudflare.com and ryan.ns.cloudflare.com. VirusTotal analysis shows that 16 of 93 security vendors flag the domain as malicious. The domain appears on three public blocklists and is specifically listed by PhishDestroy, ScamSniffer, and PhishingDB. AlienVault OTX records associate the domain with fifteen threat‑intel pulses, and Gridinsoft assigns a trust score of 0 out of 100. The page title returned is “Not Found,” and no additional content has been observed. Given the combination of a malicious reputation, active hosting, and the presence on multiple blocklists, defenders should block traffic to this host at the network perimeter, add it to endpoint allow‑list exclusions, and monitor for any related C2 communications. Continuous re‑evaluation is advised, as further malicious payloads or credential‑harvesting pages may be deployed without notice.