wdw739[.]it

The domain wdw739.it is a generic phishing site that poses an elevated risk of credential theft or fraudulent activity. It does not impersonate a specific brand or deploy a known drainer kit. As of the latest verification, wdw739.it has been taken offline, reducing immediate exposure, but prior activity may still pose risks to users who interacted with it.

Technical indicators confirm wdw739.it as a suspicious domain. It was flagged by 2 of 95 VirusTotal security vendors, including Gridinsoft and Trustwave, and appears on 1 security blocklist (PhishDestroy). The domain was registered on January 12, 2025, through 1 Api GmbH and resolves to the IP address 188.114.97.3, hosted on Cloudflare's network (AS13335). No SSL certificate was issued, and the observed page title was 'Welcome aboard'. The domain uses Cloudflare nameservers (bonnie.ns.cloudflare.com and julio.ns.cloudflare.com) and returned an HTTP 429 status code when last checked.

Users who may have interacted with wdw739.it should change any exposed credentials immediately, particularly for accounts linked to email or financial services. Enable two-factor authentication (2FA) on all critical accounts to mitigate further risk. Monitor bank statements and transaction histories for unauthorized activity. Report the domain to relevant authorities, such as local cybercrime units or platforms like Google Safe Browsing, to aid in broader threat mitigation.