wlfi[.]co
“WLFI Wallet - Secure Your Cryptocurrencies with WLFI.co”
wlfi.co — Conteúdo indisponível. Representação da marca: Arbitrum; Tipo de golpe: Seed Phrase Theft. Resumo das evidências: VirusTotal 4/95 (ChainPatrol, alphaMountain.ai, Seclookup, SOCRadar); PhishDestroy score 70/100. Registrador: NameCheap.
A análise detalhada do PhishDestroy AI permanece em inglês para preservar o registro forense original.
The domain wlfi.co is currently active and confirmed as a brand impersonation phishing site targeting users of the Arbitrum cryptocurrency platform. Analysis indicates the site mimics legitimate Arbitrum wallet services, presenting itself as 'WLFI Wallet - Secure Your Cryptocurrencies with WLFI.co' to deceive victims into disclosing sensitive credentials or transferring assets. The domain remains operational and poses an elevated risk to individuals interacting with decentralized finance (DeFi) ecosystems. Infrastructure analysis reveals the domain was registered on September 17, 2024, through NameCheap, Inc. It resolves to the IP address 188.114.97.3, which is associated with Cloudflare services, a common tactic to obscure hosting origins and evade detection. The site employs HTTP/3 and utilizes an SSL certificate issued by Google Trust Services, adding a superficial layer of legitimacy. As of the latest assessment, wlfi.co appears on one security blocklist and is flagged by 5 of 95 security vendors on VirusTotal, indicating moderate but growing detection. The domain's creation date suggests recent deployment, aligning with observed trends in short-lived phishing campaigns targeting cryptocurrency users. Current status confirms wlfi.co remains active and accessible, with no indications of takedown or mitigation at this time. Users are advised to treat this domain as malicious and avoid interaction. Organizations should update web filtering rules to block access to wlfi.co and its associated IP address (188.114.97.3). Cryptocurrency platforms and wallet providers are recommended to monitor for user reports of brand impersonation involving this domain and issue warnings to their communities. Security teams should prioritize hunting for related indicators, including the unique seed 'abecdf', in logs for signs of compromise or attempted credential theft.
Sinais de segurança
Pipeline de resposta a ameaças
Status da lista de bloqueios pública
Tecnologias · 2 identified
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 100% de confiançaHTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 100% de confiançaAnálise do VirusTotal
Evidências arquivadas
Análise de desempenho do site
Google PageSpeed Insights — mobile performance audit of wlfi.co · checked Jun 27, 2026
Evidências e relatórios externos
Você foi afetado por este site?
Se você inseriu credenciais de conta, informações pessoais ou de pagamento, ou baixou um arquivo deste domínio, tome medidas imediatas. Abaixo estão os recursos para ajudá-lo a relatar o incidente e se proteger.
Notifique as autoridades locais
Selecione seu país para obter contactos oficiais do cibercrime ou crie um rascunho de reclamação →.
Verificar qualquer domínio
Análise de ameaças usando lista de bloqueio armazenada, WHOIS, DNS e evidências de verificação pública
Digitalize agoraDenunciar phishing
Envie domínios suspeitos para nosso banco de dados de ameaças — proteja a comunidade
DenunciarFeed de ameaças em tempo real
Relatórios recentes de phishing e alterações de disponibilidade observadas
MonitorarMantenha-se informado, mantenha-se seguro
Monitore ameaças em tempo real ou conteste esta listagem caso acredite que se trate de um falso positivo