wenwenn[.]live

The domain wenwenn.live was identified as a generic phishing site designed to deceive users into disclosing sensitive information. It did not impersonate a specific brand or deploy a crypto drainer kit. As of the latest verification, wenwenn.live has been taken offline, though it previously posed an elevated risk of credential theft or other fraudulent activity.

Technical analysis of wenwenn.live revealed limited detection, with 2 of 95 VirusTotal security vendors flagging the domain, including Fortinet and Gridinsoft. The domain was created on February 21, 2026, and resolved to the IP address 188.114.96.3, hosted on Cloudflare's infrastructure (AS13335). It appeared on 1 security blocklist, specifically PhishDestroy. No SSL certificate was issued, and the observed page title was 'Nur einen Moment…'. The domain utilized Cloudflare nameservers (clarissa.ns.cloudflare.com and isaac.ns.cloudflare.com) and supported technologies such as HSTS and HTTP/3.

Users who may have interacted with wenwenn.live should take immediate steps to secure their accounts. If login credentials were entered, change passwords for all affected services and enable two-factor authentication (2FA) where available. Monitor accounts for unauthorized activity and report any suspected fraud to relevant financial institutions or platforms. To assist in mitigation efforts, victims can report the phishing domain to their email provider, browser vendor, or organizations like the Anti-Phishing Working Group (APWG) or Google Safe Browsing.