distribution-blackbullsol[.]com

Analysis of the domain distribution-blackbullsol.com indicates that it was registered on July 23, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and is currently resolving to the IP address 188.114.96.3. The authoritative name servers are kip.ns.cloudflare.com and meera.ns.cloudflare.com, both belonging to Cloudflare’s DNS infrastructure. The domain appears on a single security blocklist and is listed as blocked by the PhishDestroy feed, confirming that at least one external threat‑intelligence source has identified it as malicious.

VirusTotal has processed the domain with 91 antivirus and URL‑reputation engines; none of the engines reported a detection at the time of scanning, but the absence of detections does not constitute a safety assurance, especially given the recent creation date and the presence on a phishing‑specific blocklist. The site remains active as of the report date (July 25, 2026) and no further public indicators such as SSL certificate details, HTTP response codes, or page‑title metadata have been disclosed. Consequently, the primary observable risk is the likelihood that the domain is being used for generic phishing campaigns, as indicated by the threat type label.

Defenders should consider adding the domain to internal blocklists, monitoring DNS queries for the associated IP address, and applying sink‑hole or proxy filtering for traffic directed to the Cloudflare name servers. Continuous re‑evaluation is advised, as additional detections or content analysis may emerge in subsequent scans.