The domain palonyx.com was registered on 16 May 2026 through Namecheap Inc. The authoritative nameservers are brad.ns.cloudflare.com and coco.ns.cloudflare.com, indicating that the zone is hosted behind Cloudflare's edge network. DNS resolution points to the IPv4 address 188.114.97.3; no additional A or AAAA records were observed. VirusTotal has flagged the domain in eight of ninety‑one scanners, showing a modest but non‑trivial detection rate. The domain is listed on a single external blocklist and is actively blocked by the PhishDestroy community feed.
No public Safe Browsing, Open Threat Exchange, SSL certificate, HTTP response code, trust‑score, or page‑title information has been published for this host, and automated crawls have not yet returned a page snapshot. The limited forensic footprint suggests a newly deployed phishing infrastructure that is already attracting vendor attention. Because the domain is only weeks old, its operational lifespan may be short, but the presence of Cloudflare protection can obscure attribution and hinder takedown.
Defenders should add palonyx.com to URL filtering rules, monitor DNS queries for the 188.114.97.3 address, and consider sink‑hole or blocklist updates. Continuous re‑scanning with multi‑engine services is recommended to capture any evolution in payload or hosting changes. Incident response teams should treat any credential submissions to this domain as compromised and enforce credential rotation for affected users.