wise-meet[.]app

This domain, wise-meet.app, is actively flagged as a high-risk credential-harvesting phishing site. Analysis indicates the domain was registered on March 6, 2026, through OVH SAS, a hosting provider frequently associated with malicious infrastructure. The domain resolves to IP 213.186.33.5 (AS16276, OVH SAS, France) and currently returns an HTTP 302 redirect, suggesting dynamic redirection to a secondary malicious endpoint. No SSL certificate is present, increasing the likelihood of interception or manipulation of transmitted data. Infrastructure reveals nameservers dns200.anycast.me and ns200.anycast.me, commonly observed in phishing campaigns, alongside MX records pointing to OVH mail servers (mx1.mail.ovh.net, mx2.mail.ovh.net), which may facilitate fraudulent email communication. The domain is listed on three security blocklists, including PhishDestroy, MetaMask, and SEAL, and is flagged by 3 of 94 security vendors on VirusTotal. A Gridinsoft trust score of 0/100 further corroborates its malicious classification. The page title, wise-meet.app, does not explicitly reveal the targeted brand or service, and no specific phishing kit or victim organization has been identified in the available data. Defenders should treat this domain as an active threat, block resolution at the DNS and IP level, and monitor for related indicators such as redirect chains, associated email activity, or secondary domains hosted on the same IP. Given the lack of SSL and the use of OVH-hosted infrastructure, network-level detection rules targeting unencrypted traffic to this IP may be effective in mitigating exposure.