wlfiprinter[.]com

The domain wlfiprinter.com was registered on 2026-02-21 through HOSTINGER operations, UAB. Its authoritative nameservers are yichun.ns.cloudflare.com and zelda.ns.cloudflare.com, indicating the use of Cloudflare DNS services. The site presented a page title of “WLFI Printer,” but no additional content has been publicly disclosed. The SSL certificate is identified as R13, suggesting a recent issuance.

VirusTotal scans returned three positive detections out of ninety‑five antivirus engines, confirming that a subset of security products recognize the domain as malicious. The same domain appears on a single external blocklist and has been actively blocked by the PhishDestroy intelligence feed. The recorded scam type is “Crypto Scam,” aligning with the broader categorisation of the infrastructure as a generic phishing operation. As of the report date (2026-07-22) the domain is reported offline, and no live HTTP response could be obtained for further header or content analysis.

Uncertainty remains regarding the exact payload, victim targeting, and any command‑and‑control infrastructure that may have been associated with the site while it was active. Defenders should continue to block the domain at perimeter filters, monitor for any resurgence of the same nameserver pair or SSL fingerprint, and incorporate the three VirusTotal detections into threat‑intel feeds. Additional investigation of the vendor alerts may reveal specific malware families or phishing kits employed, and correlation with the blocklist entry could help identify related campaigns.