wffqs[.]com

This domain, wffqs.com, is identified as a high-risk phishing site targeting enterprise email credentials. Analysis of the page title, 邮箱企业 | User:, indicates an attempt to impersonate corporate email login portals, likely to harvest credentials for unauthorized access or further phishing campaigns. No specific brand impersonation or cryptocurrency drainer kit signatures were detected, but the generic phishing framework suggests broad targeting of business users. Infrastructure analysis reveals the following technical indicators: VirusTotal detection score of 20/95 security vendors flagging the domain as malicious, registered through Dynadot LLC on February 21, 2026. The domain resolves to IP address 91.202.233.156, hosted in Russia under AS200593 (PROSPERO OOO). Google Safe Browsing explicitly flags this domain as phishing, and it appears on three security blocklists. The absence of an SSL certificate further reduces legitimacy, increasing the likelihood of credential interception in plaintext. As of the latest assessment, wffqs.com has been taken offline, mitigating immediate user exposure. However, the domain remains registered and could be reactivated or repurposed. Organizations are advised to block the domain and associated IP at perimeter security controls. Users who may have interacted with the site should reset credentials via secure channels and monitor accounts for unauthorized activity. The creation date discrepancy (2026) suggests domain age manipulation, a common tactic to evade detection during initial deployment.