waddyworks[.]com

This domain is flagged for hosting generic phishing infrastructure targeting individuals and organizations through impersonation of a creative agency. Analysis indicates the site mimics legitimate branding under the guise of 'Waddyworks – Design | Brand | Dream,' a common tactic to establish false credibility and harvest sensitive information such as login credentials, financial details, or personal data. Infrastructure analysis reveals multiple technical indicators of malicious intent. The domain waddyworks.com was registered on May 20, 2026, through Wild West Domains, LLC, with an SSL certificate issued by Let’s Encrypt (R13). It resolves to the IP address 192.249.120.161, hosted by InMotion Hosting, Inc. in the United States. Security vendors on VirusTotal detected the domain, with 18 out of 95 engines flagging it as malicious. Additionally, the domain appears on one security blocklist, and the page title explicitly references a fabricated branding service, further corroborating its fraudulent nature. Mitigation against this threat involves immediate blocking of the domain and its associated IP address across network security controls. Organizations should implement email and web filtering rules to prevent user interaction with waddyworks.com and monitor for similar phishing domains registered through Wild West Domains or resolving to the same hosting provider. End users should be educated on recognizing impersonation tactics, particularly those leveraging fake creative or branding services. Security teams are advised to review logs for connections to 192.249.120.161 and investigate any credential submissions or downloads originating from the domain.