wtrl[.]com[.]cn

As of July 25, 2026, the domain wtrl.com.cn is flagged as a high-risk generic phishing site. The domain was registered through Web Commerce Communications Limited on February 21, 2026, and has been taken offline. Despite its current offline status, the domain has appeared on three security blocklists, including PhishDestroy, MetaMask, and SEAL, indicating a history of malicious activity. Infrastructure analysis reveals that the domain resolved to the IP address 104.21.81.72, which is located in the United States and is part of the AS13335 Cloudflare, Inc. network.

The domain lacks an SSL certificate, which is a common characteristic of phishing sites aiming to reduce operational costs and avoid detection. The HTTP status code 200 suggests that when the domain was active, it successfully served content, although the exact nature of the page content is not yet analyzed. Analysis indicates that 16 out of 93 security vendors on VirusTotal flagged this domain, further corroborating its high-risk status.

Given the domain's presence on multiple blocklists and the high number of detections, security researchers and defenders are advised to treat any communications or links related to wtrl.com.cn with extreme caution. Network administrators should consider adding this domain to their firewall rules and DNS blocklists to prevent potential access by unsuspecting users. Regular monitoring and updates to security policies are recommended to stay ahead of any future reactivation or similar threats.