waronsol[.]ltd
Résumé des preuves
The domain waronsol.ltd was registered on February 27, 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com. DNS resolution points to the IP address 104.21.20.185, which is hosted by Cloudflare, Inc. (AS13335) and geolocated to the United States. The authoritative nameservers are kay.ns.cloudflare.com and trey.ns.cloudflare.com, confirming the use of Cloudflare's DNS infrastructure. No SSL certificate is presented for the site, indicating that HTTPS is not configured. The page title retrieved during analysis is "Just a moment...", and no further content analysis is available.
The domain is currently marked offline, and its risk level is classified as elevated. Detection intelligence shows that three security vendors on VirusTotal flagged the domain out of a total of 94 scanners, and the domain appears on three external blocklists. Specific blocklist entries include PhishDestroy, MetaMask, and SEAL, each of which has taken action to block the domain. The observed scam type is identified as a crypto scam, aligning with the generic phishing classification.
While the limited visible surface suggests a placeholder page, the combination of recent registration, Cloudflare hosting, lack of TLS, and multiple vendor detections indicates a purposeful malicious infrastructure. Defenders should continue to block the domain at network perimeter and endpoint layers, add the associated IP address to reputation filters, and monitor for any reactivation attempts. Ongoing surveillance of the hosting provider and related subdomains is advisable, as threat actors frequently rotate assets within Cloudflare's network. The absence of a valid SSL certificate and the presence on known blocklists provide sufficient evidence for immediate mitigation without requiring further content inspection.
Data Coverage
Processus de réponse aux menaces Pipeline
Couverture des listes de blocage
10 sources externes surveillées · instantané du 10/08/2026
8 sources externes surveillées Aucune correspondance
Chronologie de détection
-
Cloudflare Radar
Analyse Cloudflare Radar enregistrée · Ouvrir l’analyse
Capture enregistrée
Informations sur les domaines
Détails techniquesDNS, noms TLS et horodatages
ICANN OVERSIGHT
Contexte de l’accréditation et du RAA
Contexte de l’accréditation et du RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analyse VirusTotal
Ce site vous a-t-il affecté ?
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Signalez-le à vos autorités locales
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.
Vérifier n'importe quel domaine
Analyse des menaces à l'aide de listes de blocage stockées, de WHOIS, de DNS et de preuves d'analyse publique
Scanner maintenantSignaler une tentative d'hameçonnage
Signalez les domaines suspects à notre base de données des menaces — protégez la communauté
SignalerFlux d'alertes en temps réel
Rapports de phishing récents et changements de disponibilité observés
SurveillerRestez informés, restez en sécurité
Surveillez les menaces en temps réel ou signalez cette alerte si vous pensez qu'il s'agit d'un faux positif