weide60[.]info

This domain, weide60.info, is flagged as an active phishing site targeting users of the Weide 1946 gambling brand, a platform claiming origins in the United Kingdom. Registered on March 4, 2026, through NameSilo, LLC, the domain currently resolves to IP address 20.255.200.238, hosted within the Microsoft Corporation network (AS8075) in Hong Kong. Analysis indicates the site employs a 301 HTTP redirect, a common technique used to obscure the final destination or to funnel traffic through intermediate infrastructure before presenting the fraudulent content. Infrastructure analysis reveals the use of Cloudflare nameservers (paul.ns.cloudflare.com and rihana.ns.cloudflare.com), which may provide anonymity and resilience against takedowns. The SSL certificate, issued by Let's Encrypt (R13), is valid and does not exhibit anomalies, though this is typical for phishing sites aiming to appear legitimate. Frontend technologies detected include Bootstrap, Swiper, Moment.js, and jQuery, which are standard libraries but offer no inherent indication of malicious intent. The page title, written in Chinese, explicitly references the Weide 1946 brand, suggesting an attempt to deceive users seeking the official gambling platform. The domain appears on one security blocklist and is flagged by a single vendor on VirusTotal, indicating limited but present detection. Gridinsoft assigns a trust score of 0/100, reinforcing the high-risk classification. While the evidence strongly suggests phishing activity, the exact payload or end-user impact remains uncertain due to the redirect behavior. Defenders should prioritize blocking the domain at the DNS or network level, particularly in regions where the Weide 1946 brand is marketed. Monitoring for related domains or subdomains under the same infrastructure may reveal additional threats, as phishing operators frequently rotate assets to evade detection.