l.wl.co
Classification: Malicious
l.wl.co is a malicious hostname. 128,909 sightings from 4 threat sources (Phishing, Phishing Amazon.com), last seen 2026-11-07.
Current activity
- Offline — no longer resolving. Last online 2026-11-07 05:05:41.
- Phishing — Hosts a phishing site and is intrinsically malicious.
- Stores phishing content — Phishing resources are hosted here.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Phishing | Phishtank | 2022-08-02 00:20:09 | 2026-11-07 05:05:22 | compromised malicious-activity phishing | |
| Top Popularity Site | Cisco Umbrella | 2022-07-19 01:55:26 | 2025-12-31 00:28:22 | benign | |
| Phishing Internal Revenue Service | Phishtank | 2021-04-13 07:20:31 | 2025-10-03 14:52:02 | compromised malicious-activity | |
| Phishing Allegro | Phishtank | 2025-10-03 13:30:07 | 2025-10-03 13:32:11 | compromised malicious-activity | |
| Phishing Amazon.com | Phishtank | 2025-10-03 11:02:28 | 2025-10-03 13:27:06 | compromised malicious-activity | |
| Phishing JPMorgan Chase and Co. | Phishtank | 2025-10-03 12:04:17 | 2025-10-03 13:04:41 | compromised malicious-activity | |
| Phishing HSBC Group | Phishtank | 2025-10-03 13:02:42 | 2025-10-03 13:02:42 | compromised malicious-activity | |
| Phishing Comcast | Phishtank | 2025-10-03 11:31:25 | 2025-10-03 12:21:26 | compromised malicious-activity | |
| Phishing PayPal | Phishtank | 2022-02-28 23:21:07 | 2022-06-08 16:23:20 | compromised malicious-activity | |
| IRS phishing | Antiphishing.com.ar | 2021-04-20 04:33:07 | 2022-02-18 01:02:53 | ||
| Phishing site | Hybrid-Analysis | 2021-09-30 00:45:28 | 2021-09-30 00:45:28 | ||
| Malicious site | Hybrid-Analysis | 2021-06-27 08:45:16 | 2021-09-01 16:00:29 | ||
| Malware | Hybrid-Analysis | 2021-07-13 17:01:18 | 2021-07-13 17:01:18 | ||
| Phishing | Mr.Looquer | 2021-04-14 15:19:42 | 2021-04-20 10:38:02 | ||
| Generic.Malware | Hybrid-Analysis | 2019-07-21 05:00:07 | 2019-08-10 13:30:04 | ||
| apple phishing | Antiphishing.com.ar | 2019-07-13 08:08:45 | 2019-08-01 01:32:05 | ||
| target unspecified phishing | Antiphishing.com.ar | 2019-07-13 08:08:15 | 2019-08-01 01:31:00 |
Tags
phishing fraudIP addresses resolved by this hostname
- 31.13.66.4 (2024-10-22 01:51:03)
- 157.240.18.15 (2019-07-13 08:08:15)
- 31.13.80.8 (2025-03-02 10:12:22)
- 57.144.75.32 (2026-03-26 00:39:23)
- 2a03:2880:f31d:120:face:b00c:0:167 (2026-03-26 00:39:23)
- 157.240.241.60 (2026-05-02 00:31:57)
- 2a03:2880:f212:1d1:face:b00c:0:167 (2026-05-02 00:31:57)
- 31.13.80.53 (2026-10-06 04:25:26)
- 2a03:2880:f20e:c5:face:b00c:0:167 (2026-10-06 04:25:26)
Whois information
- AS name
- AS32934 Facebook, Inc.
- Domain
- wl.co
- TLD
- co
- DNSSEC
- ['unsigned']
- Nameservers
- a.ns.whatsapp.net, b.ns.whatsapp.net, d.ns.whatsapp.net, c.ns.whatsapp.net, C.NS.WHATSAPP.NET, D.NS.WHATSAPP.NET, B.NS.WHATSAPP.NET, A.NS.WHATSAPP.NET
- Registrant
- RegistrarSafe, LLC
- Address
- REDACTED FOR PRIVACY, 1601 Willow Rd
- City
- REDACTED FOR PRIVACY, Menlo Park
- State
- CA
- Country
- US — United States 🇺🇸
- Contact email
- [email protected], [email protected]
- Domain created
- 2010-04-26 07:56:20
- Domain expires
- 2029-04-25 23:59:59
- First indexed
- 2019-07-13 08:08:15
- Last updated
- 2026-11-07 05:06:08