wnkyi[.]pages[.]dev

The domain wnkyi.pages.dev has been identified as a confirmed phishing site with active content designed to deceive users. The domain was created on November 16, 2025, and is currently registered through Cloudflare, Inc. It resolves to the IP address 188.114.96.3, which may be part of a larger network of domains often associated with phishing activities. The page title, which translates to content related to adult entertainment, suggests that the site aims to lure users with misleading offers of free access to presumably pirated materials.

Currently, the domain has not been flagged by VirusTotal, with a detection score of 0 out of 95. However, this lack of detection does not indicate safety, as phishing sites often evade detection initially. The domain is blocked by PhishDestroy and appears on one security blocklist, which indicates that there are existing awareness and mitigation efforts against this domain. Additionally, the domain utilizes security technologies such as HSTS and HTTP/3, which may give it a semblance of legitimacy but do not negate its malicious intent.

Infrastructure analysis reveals that the domain is still active and operating as of the report date, July 12, 2026. The Gridinsoft trust score is 0 out of 100, underscoring the high level of suspicion surrounding this site. Given these indicators, defenders are advised to monitor this domain closely and implement blocks at the network level to prevent user access. Awareness campaigns should also be considered to inform potential victims about the risks associated with this domain and similar sites.