le-wip[.]com

The domain le-wip.com was registered on June 24 2024 through NameSilo, LLC and is currently marked as active with a high risk rating. The site’s public title reads "Le Wip – Tiers‑lieu à Caen la mer, concerts & évènements, coworking, bar‑resto…", indicating a local venue‑type theme. Its classification in this assessment is generic phishing. Infrastructure analysis shows the domain resolves to the IP address 188.114.96.3, which belongs to the Cloudflare network (AS13335) and is geolocated in the United States. The service is protected by Cloudflare’s edge platform, employs HTTP/3, and presents a TLS certificate issued by Google Trust Services under the WE1 label. An HTTP 525 error is returned, indicating a SSL handshake failure between Cloudflare and the origin server. Threat intelligence sources have flagged le-wip.com on one security blocklist and it is listed as blocked by PhishDestroy. VirusTotal scans report that 1 of 95 security vendors flagged the domain, reinforcing the phishing suspicion. No additional evidence such as malware samples or credential harvesting pages has been observed, so the exact phishing payload remains unknown. Defenders should add le-wip.com to network deny lists and enforce DNS filtering to prevent client resolution. Continuous monitoring of the IP 188.114.96.3 for changes in certificate status or HTTP response codes is advised, as a transition to a functional web server could signal escalation. Because the domain uses Cloudflare’s CDN, any takedown request must target the underlying hosting provider rather than the edge service.