wallitiq[.]world

wallitiq.world is currently active and classified as a high‑risk generic phishing site that harvests credentials. The domain resolves to 172.67.149.151, an address owned by Cloudflare (AS13335) located in the United States. Its authoritative nameservers are nola.ns.cloudflare.com and roman.ns.cloudflare.com, indicating that the infrastructure is fully proxied through Cloudflare’s network. The site presents a German‑language page title “Nur einen Moment…”, but no further content has been captured. The SSL certificate is issued by Google Trust Services under the WE1 root, which is typical for Cloudflare‑protected sites and does not imply legitimacy. Gridinsoft assigns a trust score of 0/100, and the domain appears on one security blocklist, where it is also listed by PhishDestroy. VirusTotal reports three detections out of ninety‑five scanners, confirming that a minority of security products have flagged the host. The HTTP response is a 403 status, suggesting that direct access is blocked or that the site may be employing conditional delivery. Uncertainty remains regarding the exact credential‑collection mechanism, the targeted brand, and whether the page delivers a login form. Defenders should block DNS resolution for wallitiq.world, add the IP address 172.67.149.151 to network deny lists, and monitor Cloudflare‑associated traffic for similar patterns. Continuous re‑scanning is advised to capture any changes in payload or additional detections.