pc[.]wmldtrade[.]cc

Analysis indicates that the domain pc.wmldtrade.cc was registered on July 15, 2025 through Gname.com Pte. Ltd. The authoritative name servers are coleman.ns.cloudflare.com and zara.ns.cloudflare.com, pointing the domain to the Cloudflare edge address 172.67.192.66, which belongs to AS13335 Cloudflare, Inc. in the United States. HTTP requests to the host return a 503 Service Unavailable response, and the page title reported by scanners is "Blackrock". The site is built with Ant Design and Vue.js and serves content over Cloudflare's HTTP/3 stack. Reputation services have assigned a Gridinsoft trust score of 0 out of 100, indicating an extremely low confidence in legitimacy.

VirusTotal analysis shows that 13 of 94 AV engines have flagged the domain, and three independent blocklists (PhishDestroy, MetaMask, SEAL) have already listed it as malicious. The domain is currently offline, which limits active probing but does not remove the historical evidence of malicious intent. The available evidence points to a high‑risk generic phishing operation, although the specific phishing vector and target audience have not been publicly disclosed. The presence of a reputable registrar does not mitigate the risk, as the registrar is commonly used by threat actors.

The Cloudflare front‑end obscures the true backend infrastructure, making attribution difficult. Defenders should continue to block the domain at perimeter filters, update URL allow‑list exclusions, and monitor for any future resolution to alternative IP addresses. Additional scrutiny of any email or messaging campaigns that reference "Blackrock" or use the pc.wmldtrade.cc URL is recommended, as the title suggests an attempt to exploit the brand name. Ongoing observation of the associated IP and its ASN for changes in activity will help detect potential re‑hosting attempts.