email-verification[.]freedev[.]app

The domain email-verification.freedev.app is currently active and resolves to the IPv4 address 77.72.1.44, which is registered to AS34119 Wildcard UK Limited in Great Britain. Registration was performed via Spaceship, Inc., and the authoritative name servers are the Byet hosting set (ns1‑ns5.byet.org). The site presents an HTTP 200 response and serves a TLS certificate issued by ZeroSSL GmbH under the ZeroSSL ECC DV SSL CA 2 hierarchy. VirusTotal reports that 16 of 91 scanning engines flag the domain as malicious, and Gridinsoft assigns a trust score of 0 / 100. The page title returned is “Domaine suspendu,” and the listed scam type is credential phishing, indicating an attempt to harvest user credentials. The domain is already listed on at least one public blocklist and has been taken down by the PhishDestroy takedown service. While the exact landing page content has not been publicly disclosed, the available indicators suggest a high‑risk phishing infrastructure. Defenders should block the domain at perimeter firewalls and DNS resolvers, add the IP address 77.72.1.44 to reputation‑based deny lists, and monitor for related email‑verification sub‑domains that may be used in credential‑harvesting campaigns. Continuous threat‑intel feeds should be consulted for any new indicators of compromise associated with this infrastructure.