wingchunholland[.]nl

The domain wingchunholland.nl has been flagged as a potential generic phishing site impersonating legitimate Wing Chun Kung Fu schools in the Netherlands, including locations in Gouda, Veenendaal, and Rotterdam. The site likely aims to harvest personal or payment details from unsuspecting visitors posing as prospective students. No advanced drainer kit or brand spoofing has been detected at this stage, but the campaign's active status suggests ongoing malicious activity. This domain was registered on November 17, 2018, through Nederhost and resolves to IP address 141.105.123.203. VirusTotal currently shows 3 out of 95 engines flagging the domain as malicious, indicating it has evaded broad detection at this time. The SSL certificate is issued by Let's Encrypt, which provides no inherent guarantee of legitimacy. It has not been marked as unsafe in Google Safe Browsing (GSB) and currently remains unlisted on major threat blocklists. As of the latest analysis, the domain remains active and hosts content mimicking Wing Chun Kung Fu schools across multiple Dutch cities. Immediate action includes blacklisting the domain and IP at the network perimeter, as well as advising users to exercise caution when browsing to such sites. The ongoing risk is classified as under investigation, but users interacting with this site risk credential theft or malware exposure. Defenders are advised to monitor for related infrastructure or domain permutations.