# wlfibitrade.com — MALICIOUS

> wlfibitrade.com is flagged for phishing risks. Avoid sharing sensitive info and verify site legitimacy before using it.

## Summary
PhishDestroy identifies wlfibitrade.com as a high-risk generic phishing domain. It aims to deceive users with a fake crypto wallet interface to steal sensitive information.

This domain was created recently and resolves to IP 188.114.96.3. It is registered via Gname.com Pte. Ltd., appears on multiple security blocklists, and has been flagged by 19 security vendors on VirusTotal. AlienVault OTX also associates it with malicious activity.

Users should avoid interacting with this site and refrain from entering any credentials. The domain remains active and continues to pose a significant threat. Continuous monitoring and blocking are advised to mitigate risks.

## Threat Details
- Verdict: MALICIOUS
- Site status: alive (HTTP 530)
- Page title: WLFI Wallet - Secure Your Cryptocurrencies with WLFI.co

## Domain Intelligence
- Registered: 2026-01-11 13:32:53
- Registrar: Gname.com Pte. Ltd.
- Country: SG
- IP: 188.114.96.3
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["MEERA.NS.CLOUDFLARE.COM", "STEVEN.NS.CLOUDFLARE.COM"]
- SSL Issuer: WE1

## Detection Status
- VirusTotal: 19 vendors flagged
  Vendors: ["ADMINUSLabs", "ChainPatrol", "alphaMountain.ai", "BitDefender", "Certego", "CRDF", "CyRadar", "ESET", "Forcepoint ThreatSeeker", "Fortinet", "G-Data", "Google Safebrowsing", "Gridinsoft", "Kaspersky", "Lionic", "Seclookup", "SOCRadar", "Sophos", "VIPRE"]
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["PhishDestroy", "MetaMask"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019bb7da-9345-71bb-a524-7ec914f8d20b.png
- PhishDestroy: https://phishdestroy.io/domain/wlfibitrade.com/
- LLM endpoint: https://phishdestroy.io/domain/wlfibitrade.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/wlfibitrade.com/
Last updated: 2026-03-19