dot-io[.]cc

Analysis of dot-io.cc indicates a high‑risk generic phishing site that was taken offline prior to the report date of July 23, 2026. The domain was registered on February 19, 2025 through NameSilo, LLC and resolves to the IPv4 address 91.223.3.154, which is assigned to AS201814 (MEVSPACE sp. z o.o.) located in Poland. The web server presents an Nginx/OpenResty stack and serves an SSL certificate issued by Let’s Encrypt (R12).

The page title returned during the brief window of activity was "Coming Soon - DOT," and the domain’s MX record points to mail.eye-mail.net with priority 1. Reputation checks show a Gridinsoft trust score of 0 out of 100, and Google Safe Browsing classifies the site as a social engineering threat. The domain appears on four security blocklists—PhishDestroy, Polkadot, Enkrypt, and Codeesura—demonstrating that multiple threat‑intel feeds have flagged it. AlienVault OTX references the domain in a single pulse, and VirusTotal recorded 16 detections out of 95 scanning engines, reinforcing the malicious assessment.

Nameserver delegation is handled by Cloudflare (bingo.ns.cloudflare.com and yisroel.ns.cloudflare.com). Although the site is currently offline, defenders should continue to block the domain at network perimeter devices, update DNS sinkhole entries, and monitor the associated IP range for any reactivation attempts. Further investigation is warranted to determine whether additional infrastructure shares the same IP or certificate, and to confirm if any residual mail services remain active. Continuous telemetry from endpoint and web‑proxy logs is recommended to catch any lingering attempts to reference dot-io.cc.