The domain blackops-link.cyou was registered on July 25, 2026 and is currently resolving to the address 104.21.48.167. Registration details list NICENIC INTERNATIONAL GROUP CO., LIMITED as the registrar, and the authoritative name servers are adel.ns.cloudflare.com and javon.ns.cloudflare.com, indicating Cloudflare DNS hosting. VirusTotal records show that the domain has been scanned by 91 anti‑malware vendors; none of the scanners reported a detection, a result that does not confirm the domain’s safety and must be interpreted with caution.
The domain appears on a single external security blocklist and has been actively blocked by the PhishDestroy feed, reinforcing the suspicion of malicious intent. No public Safe Browsing, Open Threat Exchange, SSL certificate, HTTP response code, trust‑score, or page‑title information is currently available, and no evidence links have been published. The limited visibility of the site’s content means that the exact phishing payload or targeted brand cannot be confirmed at this time.
While the infrastructure signals—newly created domain, Cloudflare DNS, and inclusion on a phishing‑specific blocklist—strongly suggest a phishing operation, analysts should treat the domain as hostile. Defensive measures should include adding the domain to local blocklists, monitoring DNS queries for the associated IP address, and enforcing outbound filtering to prevent credential submission to the site. Continuous re‑evaluation is advised as additional telemetry (e.g., sandbox analysis or page‑title extraction) becomes available.