wasabilove[.]live

wasabilove.live was registered on July 25, 2026 through Fewmoretaps OU d/b/a Trustname.com and is hosted on Cloudflare infrastructure, resolving to the IPv4 address 172.67.198.166. The domain is delegated to the Cloudflare name servers keenan.ns.cloudflare.com and sonia.ns.cloudflare.com. Analysis shows the domain is currently active and has been added to at least one public security blocklist. PhishDestroy has already flagged the domain and applied a block, indicating that at least one downstream security product is enforcing mitigation.

A VirusTotal scan was performed by 91 AV engines; none of the engines reported a detection, though the absence of detections does not constitute a safety guarantee. No additional public threat intelligence sources such as Google Safe Browsing, OTX, or SSL reputation services have disclosed further findings for this host. Likewise, page‑level metadata such as HTTP response codes, TLS certificate details, or page titles have not been published in the available intelligence.

The limited evidence points to a newly created phishing‑type infrastructure that is actively serving malicious content, but the exact payload or targeted brand remains unconfirmed. Defenders should block the domain at network perimeter devices, add it to local deny lists, and monitor DNS queries for the 172.67.198.166 address. Continual re‑scanning with sandbox and URL‑reputation services is advised to capture any evolving payloads, and any future detections should be correlated with this indicator to refine detection rules.