wwvv-laedger[.]net

This domain, wwvv-laedger.net, is currently flagged as a high-risk phishing site targeting users through a deceptive 'Access Restricted' page. Registered on July 8, 2026, via NICENIC INTERNATIONAL GROUP CO., LIMITED, the domain remains active as of July 12, 2026, and is hosted on Cloudflare infrastructure, resolving to the IP address 188.114.96.3 (AS13335, Canada). The nameservers (arushi.ns.cloudflare.com and louis.ns.cloudflare.com) and SSL certificate (Google Trust Services / WE1) align with common phishing patterns leveraging Cloudflare for anonymity and resilience. Analysis indicates the domain is blocked by three security vendors (PhishDestroy, MetaMask, and SEAL) and appears on three blocklists, reinforcing its malicious classification. The HTTP status code 520 ('Web server is returning an unknown error') suggests either deliberate misconfiguration or an attempt to evade automated detection. Gridinsoft assigns a trust score of 0/100, further corroborating its risk profile. While VirusTotal reports a single detection from 91 vendors, this limited visibility does not diminish the domain's confirmed malicious status, as phishing infrastructure often evades initial scans. The page title 'Access Restricted' implies an attempt to mimic legitimate service denials, potentially tricking users into interacting with fraudulent authentication prompts or malware downloads. However, the exact content and target (e.g., financial services, corporate credentials) remain unconfirmed due to the lack of deeper analysis. Defenders should treat this domain as active phishing infrastructure and implement immediate blocking at the DNS, IP, and certificate levels. Monitoring for related domains registered through the same registrar or leveraging identical Cloudflare nameservers may help identify broader campaign infrastructure.