midlandmolecatcher[.]co[.]uk

midlandmolecatcher.co.uk was registered on 22 November 2025 through Realtime Register BV operating as Axidomains. The domain resolves to the IPv4 address 92.113.23.88, which is owned by AS47583 Hostinger International Limited and geolocated to Germany. No TLS certificate is presented, indicating all traffic would be unencrypted HTTP. The public page title returned is “MMC -”, offering no clear indication of purpose. Automated scanning on VirusTotal shows that 3 of 93 AV engines flagged the domain as malicious, reinforcing suspicion.

Gridinsoft assigned a trust score of 0 out of 100, and the domain appears on a single security blocklist. PhishDestroy has also listed the domain as blocked. Nameserver records point to ns1.dns-parking.com and ns2.dns-parking.com, typical of parked or parking‑service infrastructure. The observed threat classification is brand impersonation targeting the “scroll” brand, consistent with the listed scam type. The domain’s current status is offline, and the site has been taken down.

Analysis indicates that the domain leverages a recently created, unencrypted site hosted on a shared hosting provider, likely to host a copy of the scroll brand’s login or landing page. The limited detection (3 AV flags) and low blocklist presence suggest early‑stage activity, but the 0/100 trust score and blocklist inclusion demonstrate high risk. Uncertainty remains regarding the exact content served before takedown, as no visual or functional details are available. Defenders should continue to block the domain at perimeter and DNS layers, monitor the hosting IP 92.113.23.88 for related activity, and add the domain to internal threat‑intel feeds. Additional scrutiny of other domains registered by the same registrar or using the same nameservers may uncover further malicious infrastructure.