walue[.]app

This domain walue.app has been identified as an active generic phishing threat carrying a high risk classification. Registered on February 20 2021 through Porkbun LLC the domain remains online with HTTP status 200. It resolves to IP address 151.101.65.195 in the United States under AS54113 and uses nameservers curitiba.ns.porkbun.com fortaleza.ns.porkbun.com maceio.ns.porkbun.com and salvador.ns.porkbun.com. The associated page title is recorded as Walue. Current intelligence confirms the site is still active and appears on one security blocklist.

Technical indicators include an SSL certificate from Google Trust Services under the WR3 profile together with technologies Firebase HSTS and HTTP/3. VirusTotal reports detections by 12 out of 95 vendors while the Gridinsoft trust score is listed as 0 out of 100. The domain is additionally blocked by PhishDestroy. These observables establish a consistent pattern of malicious designation without reliance on any single source.

What remains uncertain is the precise content served at the time of access because only the page title has been captured. No further visual or functional details of the phishing mechanism have been examined. The exact targeting or payload delivery method therefore cannot be confirmed beyond the assigned generic phishing category.

Defenders should implement immediate blocks on the domain and its current IP address in network controls and endpoint policies. Continuous monitoring for new resolutions or related domains sharing the same nameserver set is recommended. Regular synchronization with updated blocklists and threat feeds will support ongoing containment while the site maintains its active status.