opt-we4lth-vip[.]website

The domain opt-we4lth-vip.website was registered on March 23, 2026 through Dominet (HK) Limited and is resolved to the IP address 163.181.214.90, which is hosted by Alibaba Cloud LLC in the United States and delivered via Alibaba Cloud CDN. The site presented a page titled “Verification” before being taken offline, suggesting a generic phishing lure that attempts to trick users into confirming credentials or personal data. An SSL certificate issued by Let’s Encrypt (R12) was in use, indicating encrypted HTTPS traffic, but the certificate does not provide any brand affiliation. The domain appears on a single security blocklist and has been actively blocked by the PhishDestroy filter, reflecting that threat‑intelligence feeds have identified it as malicious.

VirusTotal scans show that five of ninety‑four antivirus and URL‑reputation engines flagged the domain, reinforcing the suspicion of phishing activity. The hosting environment’s trust score, as measured by Gridinsoft, is 0 out of 100, underscoring the lack of credibility. Nameserver configuration uses eiger.ns.atrustdns.com and pacific.ns.atrustdns.com, common for domains registered via the listed registrar. The current status is offline, limiting immediate observation of payload or content.

While the page title is the only visible indicator of intent, the combination of registration recency, low trust score, blocklist presence, and multiple vendor detections points to a deliberately crafted phishing site. Defenders should continue to block the domain at network perimeter devices, update URL filtering and threat‑intel feeds, and monitor for any resurrection or related domains registered by the same registrar or resolved to the same IP range. Further analysis of archived content, if available, could clarify the exact data collection tactics employed.