6pm1[.]pilot45[.]com

Analysis of the domain 6pm1.pilot45.com indicates it is currently offline but retains indicators of malicious intent. The domain was registered on December 23, 2024 through Gname.com Pte. Ltd. and is served by Cloudflare nameservers aron.ns.cloudflare.com and titan.ns.cloudflare.com. DNS resolution points to the IP address 172.67.128.224, which belongs to AS13335 Cloudflare, Inc., a service commonly leveraged by threat actors to obscure origin. The hosting location is identified as the United States.

No SSL/TLS certificate is presented for the site, implying HTTP‑only delivery or a misconfigured HTTPS endpoint. The sole page title retrieved before takedown reads "网站筹建中", a Chinese phrase meaning “website under construction,” offering no direct indication of the intended impersonated brand or service. Scamadviser assigns a trust score of 1 out of 100, reinforcing the low credibility of the domain. Security aggregators have flagged the domain: it appears on one blocklist and is listed as blocked by PhishDestroy.

VirusTotal scans show that 14 of 95 scanning engines flagged the domain, confirming a consensus of malicious behavior across multiple vendors. The combination of a recent registration date, lack of encryption, reliance on a shared CDN, low trust rating, and multiple vendor detections suggests a high likelihood that the site was used for generic phishing attempts. Defenders should continue to block the domain at network perimeters, update email security gateways to reject any URLs referencing this host, and monitor the associated IP range for any resurgence of activity. Because the exact brand or credential‑harvesting mechanism is not observable, further passive DNS and threat‑intel correlation is advised to identify any related infrastructure that may be employed in future campaigns.