wlfi-25[.]com

Analysis of wlfi-25.com shows that the domain is currently offline and has been taken down by the PhishDestroy takedown service. The site was registered on September 2, 2025 through PDR Ltd. d/b/a PublicDomainRegistry.com. DNS resolution points to 104.21.96.1, an address owned by Cloudflare (AS13335) located in the United States. The TLS certificate presented is a Cloudflare TLS Issuing ECC CA 1 certificate, indicating the use of Cloudflare’s CDN and SSL termination services.

Reputation services assign very low trust scores: Scamadviser rates the domain 16 out of 100 and Gridinsoft assigns 0 out of 100. VirusTotal reports that 14 of 93 scanning engines flag the domain as malicious, reinforcing the suspicion. The domain appears on one security blocklist and is classified as a crypto‑scam. The page title observed before takedown references a “Biggest giveaway of $100,000,000 from Brad Garlinghouse,” and the threat profile lists impersonation of the brand “cs2”.

These elements suggest a targeted brand‑impersonation campaign that leverages a high‑value giveaway narrative to lure victims into a cryptocurrency fraud. The exact content of the landing page cannot be verified because the site is offline, and no additional indicators such as malicious payload hashes or command‑and‑control endpoints have been disclosed. Defenders should continue to block the domain at network perimeter and DNS layers, monitor for any resurgence of the same host header or similar giveaway‑style titles, and add the associated IP address to reputation lists. Incident response teams should also flag any communications referencing “Brad Garlinghouse” or the $100 million giveaway as potentially fraudulent, and corroborate with user reports before allowing any credential or cryptocurrency transaction.