Notification and current-status evidence
The sent-report ledger records the first outgoing report at . A report was sent to the recorded registrar; contact details remain in Domain Intelligence. The latest stored availability evidence still shows the domain reachable; 4 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
pc[.]wmldtrade[.]cc
“Blackrock”
Résumé des preuves
Analysis indicates that the domain pc.wmldtrade.cc was registered on July 15, 2025 through Gname.com Pte. Ltd. The authoritative name servers are coleman.ns.cloudflare.com and zara.ns.cloudflare.com, pointing the domain to the Cloudflare edge address 172.67.192.66, which belongs to AS13335 Cloudflare, Inc. in the United States. HTTP requests to the host return a 503 Service Unavailable response, and the page title reported by scanners is "Blackrock". The site is built with Ant Design and Vue.js and serves content over Cloudflare's HTTP/3 stack. Reputation services have assigned a Gridinsoft trust score of 0 out of 100, indicating an extremely low confidence in legitimacy.
VirusTotal analysis shows that 13 of 94 AV engines have flagged the domain, and three independent blocklists (PhishDestroy, MetaMask, SEAL) have already listed it as malicious. The domain is currently offline, which limits active probing but does not remove the historical evidence of malicious intent. The available evidence points to a high‑risk generic phishing operation, although the specific phishing vector and target audience have not been publicly disclosed. The presence of a reputable registrar does not mitigate the risk, as the registrar is commonly used by threat actors.
The Cloudflare front‑end obscures the true backend infrastructure, making attribution difficult. Defenders should continue to block the domain at perimeter filters, update URL allow‑list exclusions, and monitor for any future resolution to alternative IP addresses. Additional scrutiny of any email or messaging campaigns that reference "Blackrock" or use the pc.wmldtrade.cc URL is recommended, as the title suggests an attempt to exploit the brand name. Ongoing observation of the associated IP and its ASN for changes in activity will help detect potential re‑hosting attempts.
Instantané des preuves transmises
- Envoyé
- Entrées du registre
- 1
- ID du dossier
PD-20260316-858930- Titre de la page capturée
- Blackrock
- Artefact PDF
- Preuve PDF
Texte intégral des preuves
Policy Violations: Illegal Activities section forbids phishing, fraud, fake sites, malware distribution; registrar investigates and may suspend or delete domain
Applicable Laws: Computer Misuse Act 1993 §§3+, Penal Code §§415–420 (cheating), Online Criminal Harms Act (OCHA)
Data Coverage
Renseignements sur la sécurité réseau
Processus de réponse aux menaces Pipeline
Couverture des listes de blocage
10 sources externes surveillées · instantané du 12/08/2026
8 sources externes surveillées Aucune correspondance
Chronologie de détection
-
VirusTotal
0 → 7
Technologies
4 technologies identifiées avec une forte confiance
Analyse VirusTotal
Ce site vous a-t-il affecté ?
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Signalez-le à vos autorités locales
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.
Vérifier n'importe quel domaine
Analyse des menaces à l'aide de listes de blocage stockées, de WHOIS, de DNS et de preuves d'analyse publique
Scanner maintenantSignaler une tentative d'hameçonnage
Signalez les domaines suspects à notre base de données des menaces — protégez la communauté
SignalerFlux d'alertes en temps réel
Rapports de phishing récents et changements de disponibilité observés
SurveillerRestez informés, restez en sécurité
Surveillez les menaces en temps réel ou signalez cette alerte si vous pensez qu'il s'agit d'un faux positif