wolphone[.]net

Analysis as of July 23 2026 indicates that the domain wolphone.net was registered through Dynadot Inc on July 12 2026. The domain resolves to the IP address 172.67.162.64 and is served by Cloudflare, as reflected by the authoritative nameservers arvind.ns.cloudflare.com and lovisa.ns.cloudflare.com. Wolphone.net appears on a single security blocklist and has been actively blocked by the PhishDestroy feed, which classifies it as a generic phishing infrastructure. VirusTotal has processed the domain with 95 scanning engines; none returned a positive detection.

The lack of detections does not imply safety, particularly given the blocklist inclusion and recent creation date. No page title, SSL certificate information, HTTP status code, or content snapshot is presently available, so the specific phishing lure, targeted brand, or credential‑capture methodology remains undetermined. The limited telemetry suggests a short‑lived, possibly automated campaign that leverages Cloudflare’s CDN to obscure origin.

Defenders should block DNS resolution for wolphone.net, add the IP 172.67.162.64 to outbound filtering lists, and monitor for any outbound connections to the address. Continuous re‑evaluation with VirusTotal and other URL reputation services is recommended, as additional detections may appear. Organizations that rely on Cloudflare‑protected services should verify that legitimate traffic to the shared IP range is not inadvertently permitted, and consider sinkholing the address if feasible.