1waufy[.]life

The domain 1waufy.life has been identified as a phishing site engaged in brand impersonation, specifically targeting Ethereum users. The site was designed to mimic legitimate cryptocurrency services and poses an elevated risk to visitors by attempting to deceive them into interacting with fraudulent content. As of the latest analysis, the domain is currently taken offline and is not safe to visit.

Technical analysis shows that 1waufy.life was registered through SD-onenetwork (ASN: 16276) and resolves to IP address 57.129.97.29, which is located in Germany (AS16276 OVH SAS). The domain uses an SSL certificate issued by XUI.one / XUI.one and is served via Cloudflare nameservers nick.ns.cloudflare.com and ryleigh.ns.cloudflare.com. VirusTotal reports that 1 of 95 security vendors, including SOCRadar, detect this domain as malicious. Additionally, it appears on 1 security blocklist (PhishDestroy), and the Gridinsoft trust score for the domain is 0/100. Google Safe Browsing has not flagged the domain. The observed page title was '1WAUFY | Enter the world of sport and stakes!'.

Users who interacted with 1waufy.life, especially those who connected cryptocurrency wallets, should immediately revoke any token approvals and transfer their assets to a new wallet to prevent unauthorized access. If login credentials were entered, users should change their passwords, enable two-factor authentication, and monitor for suspicious activity. Suspected phishing or scam domains like 1waufy.life can be reported to security vendors and blocklist maintainers to help protect other users.