Notification and current-status evidence
The sent-report ledger records the first outgoing report at . A report was sent to the recorded registrar; contact details remain in Domain Intelligence. The latest stored availability evidence still shows the domain reachable; 4 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
pc[.]wmldtrade[.]cc
“Blackrock”
Analysis indicates that the domain pc.wmldtrade.cc was registered on July 15, 2025 through Gname.com Pte. Ltd. The authoritative name servers are coleman.ns.cloudflare.com and zara.ns.cloudflare.com, pointing the domain to the Cloudflare edge address 172.67.192.66, which belongs to AS13335 Cloudflare, Inc. in the United States. HTTP requests to the host return a 503 Service Unavailable response, and the page title reported by scanners is "Blackrock". The site is built with Ant Design and Vue.js and serves content over Cloudflare's HTTP/3 stack. Reputation services have assigned a Gridinsoft trust score of 0 out of 100, indicating an extremely low confidence in legitimacy.
VirusTotal analysis shows that 13 of 94 AV engines have flagged the domain, and three independent blocklists (PhishDestroy, MetaMask, SEAL) have already listed it as malicious. The domain is currently offline, which limits active probing but does not remove the historical evidence of malicious intent. The available evidence points to a high‑risk generic phishing operation, although the specific phishing vector and target audience have not been publicly disclosed. The presence of a reputable registrar does not mitigate the risk, as the registrar is commonly used by threat actors.
The Cloudflare front‑end obscures the true backend infrastructure, making attribution difficult. Defenders should continue to block the domain at perimeter filters, update URL allow‑list exclusions, and monitor for any future resolution to alternative IP addresses. Additional scrutiny of any email or messaging campaigns that reference "Blackrock" or use the pc.wmldtrade.cc URL is recommended, as the title suggests an attempt to exploit the brand name. Ongoing observation of the associated IP and its ASN for changes in activity will help detect potential re‑hosting attempts.
Istantanea delle prove inviate
- Inviato
- Voci del registro
- 1
- ID del caso
PD-20260316-858930- Titolo della pagina acquisita
- Blackrock
- Artefatto PDF
- Prova in PDF
Testo completo delle prove
Policy Violations: Illegal Activities section forbids phishing, fraud, fake sites, malware distribution; registrar investigates and may suspend or delete domain
Applicable Laws: Computer Misuse Act 1993 §§3+, Penal Code §§415–420 (cheating), Online Criminal Harms Act (OCHA)
Informazioni sulla sicurezza di rete
Pipeline di risposta alle minacce
Copertura delle blocklist
10 fonti esterne monitorate · snapshot del 10/08/2026
Cronologia del rilevamento
-
VirusTotal
0 → 7
Tecnologie
4 tecnologie identificate con alta affidabilità
Analisi di VirusTotal
Questo sito ti ha influenzato in qualche modo?
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo