wlfi[.]lc

The domain wlfi.lc is currently classified as a generic_phishing site with a high risk rating. Infrastructure analysis shows the domain is hosted behind Cloudflare, utilizing HTTP/3 and presenting an SSL certificate issued by Google Trust Services (WE1). DNS resolution points to IP 172.67.183.33, which belongs to AS13335 Cloudflare, Inc., located in the United States. Both authoritative nameservers, amit.ns.cloudflare.com and zita.ns.cloudflare.com, are Cloudflare‑managed. The web server returns HTTP status 521, indicating that Cloudflare is refusing connections, which is consistent with a blocked or mitigated service. The page title observed is “FASTPANEL,” but no further content has been disclosed. The domain is listed on one security blocklist and has been blocked by PhishDestroy. VirusTotal analysis reports four of ninety‑five scanners flagging the domain as malicious, reinforcing the phishing classification. Current intelligence does not reveal the specific payload or target brand, and the site’s content has not been captured. Defenders should continue to block wlfi.lc at perimeter and DNS layers, monitor for any new resolution or certificate changes, and consider adding the domain to internal blocklists. Ongoing observation is advised to detect potential re‑activation or shifts in hosting infrastructure.