wlficheckwhitelist[.]xyz

This domain, wlficheckwhitelist.xyz, is assessed as a malicious site based on its name and threat intelligence data. The domain name suggests it is a fraudulent platform for checking a whitelist, likely used in phishing or credential harvesting schemes. The threat it poses is primarily credential theft and potential malware distribution, as it impersonates a legitimate whitelist verification service to deceive users into providing sensitive information.

Technical evidence shows the domain was flagged by 13 out of 95 VirusTotal vendors. It was detected by ChainPatrol, alphaMountain.ai, BitDefender, CyRadar, and Forcepoint ThreatSeeker, with two blocklists recording it. The domain is hosted on IP address 172.67.170.165, located in the United States under AS13335 Cloudflare, Inc. It was created on 2026-02-21 and uses SSL certificate type WE1.

The site is currently down or offline. With a DOM risk score of 80, it represents a high risk to users. Immediate blocking of this domain is recommended to prevent potential compromise.