we-paie[.]com

Analysis of www.we-paie.com shows a high‑risk, active phishing infrastructure. The domain resolves to IPv4 address 79.99.164.4, which is registered to AS16347 ADISTA SAS in France. Registration data indicates the domain was created on 16 October 2019 through Gandi SAS, and it is served by nameservers ns1.planet-work.com, ns2.planet-work.com, and ns3.planet-work.com. The site presents a TLS certificate from Let’s Encrypt (R12) and, when queried, returns HTTP status 503, suggesting the payload may be intermittently unavailable. Detected technologies include WordPress, MySQL, PHP, Yoast SEO, Beaver Builder, reCAPTCHA, Google Tag Manager, and Google Analytics. The page title "APIGACOR88 : Situs Slot Gacor Hari Ini Link Alternatif Mudah Jackpot" indicates a gambling‑oriented lure, a common vector for credential‑theft campaigns. VirusTotal scans show that 1 of 91 security vendors flagged the domain, and it appears on a single external blocklist, with PhishDestroy already enforcing a block. Given the combination of a flagged vendor detection, a phishing classification, and the presence of credential‑harvesting mechanisms, defenders should add www.we-paie.com to network deny lists, monitor outbound DNS queries for the domain, and consider sinkholing the associated IP range to disrupt potential malicious traffic. Continuous observation is advised, as the site may re‑activate or change content without notice.