wnum[.]net

This domain www.wnum.net was registered on May 02, 2026 through Squarespace Domains LLC. Infrastructure analysis reveals that it resolves to IP address 15.197.129.158 and presents an SSL certificate from Let's Encrypt. Technologies detected on the host include Node.js along with the Express framework. The observed page title reads wNum - Virtual Numbers for WhatsApp Business | Get Instant Virtual Phone Numbers. These technical attributes establish the current hosting profile of the domain.

The domain is flagged for brand impersonation targeting PayPal. VirusTotal reports indicate detection by 2 out of 95 security vendors. The domain appears on 1 security blocklist and is referenced across 4 threat intelligence pulses in AlienVault OTX. The site maintains an active status as of July 12, 2026 and continues to be blocked by PhishDestroy. These indicators collectively point to ongoing malicious use of the domain for impersonation purposes.

Uncertainty remains regarding the precise content served at the time of each detection event, although the page title does not align with typical PayPal branding. The registrar and hosting provider details are known, yet the exact operational timeline between registration and first detection requires correlation with additional logs. No further autonomous system or geolocation data is supplied in the available records.

Defenders should block the IP 15.197.129.158 at network perimeters and monitor for similar registrations under the same registrar. Coordination with Squarespace Domains LLC is recommended to evaluate suspension options. Security teams are advised to incorporate the VirusTotal and AlienVault OTX references into existing threat feeds for continued tracking of this infrastructure.