wneteacloud[.]top

The domain wneteacloud.top was registered on 21 February 2026 through Gname.com Pte. Ltd. and is hosted on the HostPapa network (ASN 36352) at IP address 172.245.67.31, a location attributed to the United States. DNS resolution is served by expire1.gname-dns.com. and expire2.gname-dns.com., both typical of the registrar’s default name‑server set. The site presented a page title identical to the domain name and did not present a TLS certificate, indicating that all traffic was unencrypted HTTP.

Shortly after activation, the domain was added to multiple threat‑sharing feeds: PhishDestroy listed it as a malicious host, AlienVault OTX referenced it in one pulse, and at least one public blocklist flagged the address. VirusTotal scans returned 11 positive detections out of 93 antivirus engines, confirming that the content was recognized as malicious by a significant subset of the security community. The overall risk assessment was elevated and the site was classified as a generic phishing operation. By the time of the July 23 2026 assessment the domain had already been taken offline, which explains the current lack of active HTTP response.

Nevertheless, the historical footprint remains relevant: the IP address continues to belong to the same hosting provider, and the registrar’s name‑servers are still in use. Defensive teams should continue to block both the domain and its associated IP range, monitor for any re‑registration attempts, and ensure that any residual references in internal logs are treated as malicious. In addition, updating URL filtering and Safe Browsing lists with the observed indicators will help prevent future user exposure. No SSL/TLS evidence was observed, reinforcing the need for strict transport security controls when encountering similar unencrypted domains.