wlfihabit[.]com

This domain, wlfihabit.com, was registered on 11 January 2026 through Gname.com Pte. Ltd. The registration date places the infrastructure in the early 2026 threat landscape. Shortly after activation, the domain was identified as a generic phishing site and subsequently taken offline. Analysis from multiple security vendors shows that 22 of 93 scanners on VirusTotal flagged the domain as malicious, indicating a consensus among a quarter of the examined engines. The domain is listed on a single public blocklist and received a zero‑score trust rating from Gridinsoft, reflecting a complete lack of confidence in its legitimacy.

PhishDestroy has also applied a block, confirming its classification as a phishing vector. AlienVault OTX references include two independent pulses that cite wlfihabit.com as part of broader phishing campaigns, providing additional corroboration of its malicious intent. No further technical details such as IP address, hosting ASN, or SSL certificate information have been published, and the page title or content has not been disclosed in the available data set. Defenders should immediately add wlfihabit.com to deny‑list rules across firewalls, DNS filters, and endpoint protection solutions.

Continuous monitoring of any resolver queries for the domain is advised, as re‑registration or the use of similar aliases remains possible. Organizations that employ email gateway filtering should ensure that messages containing links to this domain are quarantined or rejected. Given the offline status, the current risk is limited to residual references, but the historical detection pattern suggests a high propensity for reuse in future phishing operations, warranting ongoing vigilance.