wahana777login[.]net

On July 25, 2026 the domain wahana777login.net was observed as offline but retains a record of recent malicious activity. The domain was registered on March 11, 2026 through NameSilo, LLC and is hosted on an IP address 212.224.93.155 that belongs to AS214036 Ultahost, Inc. in Germany. Authoritative nameservers ns1.ultahost.cyou and ns2.ultahost.cyou resolve to the same hosting provider, confirming the infrastructure linkage. The site served an HTTP 200 response with a TLS certificate issued by Let’s Encrypt (E8), indicating that encryption was in place at the time of capture.

The page title returned by the server reads “Wahana777 : Link Game Pasti Maxwin Anti Rungkad RTP 99%”, which aligns with the classified scam type of credential phishing. Technical fingerprints show a WordPress stack backed by MySQL and PHP, running on LiteSpeed with AMP and HTTP/3 enabled, suggesting a typical content‑management deployment rather than a custom phishing kit. VirusTotal scans recorded three detections out of ninety‑five scanners, reinforcing the malicious assessment. The domain appears on at least one security blocklist and has been flagged by PhishDestroy, confirming that defensive feeds are already aware of the threat.

No additional intelligence such as phishing page screenshots, credential harvesting endpoints, or malware payloads has been published, leaving the exact method of credential capture unknown. Defenders should continue to block the domain and its hosting IP, update URL filtering rules, and monitor for any resurgence of the site or related subdomains. Given the recent creation date, the infrastructure may be repurposed for new campaigns, so ongoing surveillance of the Ultahost hosting range is advised.